last executing test programs: 32.072840898s ago: executing program 1 (id=816): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x0, 0x8, 0xcc, {0xcc, 0xe, "e5622e34c677cfe3032a69be0aeeef2dcd43c2e9718005d0c983d879110ca11f16a6a11f8a9df120d58045fe77267bc24b67052fd8a73b23151a38c805b53d11b70de3ef0907f4879d9b4689232e5d332085ebfc7feadc173b9d73fc61434f973dcdf77dd60e7fe09ac4002dac2734a658717768aad11e297d1cf30b1cfa53e6aff62fb9e4d44504573de66ee46b1751bd7e7a51a3ff33b394402e8f9196d5bf674d45f41d30a37dcc8ecb02a279cfe97db136cf93ba77472a72eda9aa9fe4fda4cc00349bd5fdbecb6b"}}, &(0x7f0000000000)={0x0, 0x3, 0x88, @string={0x88, 0x3, "8f4facd9f887f00530ae0e47da537a2330e4d0ae389d177bcfb73ad382c4cabb59d8a89e52bbe8d12991f359c9506b174adcbe5bbf3ef0a8cfa75221ef9eff168d62748c0e59dacb7a735afc388df49688412996f8d8261c76cb8b7cf6c032659190ea3c81036bab015a9ea97d66659bf54ff254cf866201523ca2d359861ae39d847566c7d8"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x3, 0x8c, "1ce2d5aa04d5d59eab47b4f1e0daf30c3038e0685d4d44d25bb1268a0834dd21024da9e72458ab128e5a5f1b70d678146191260ef7e5ec02fc7b95e664edff92b6b9dac104e444ca1de991ff4c24c34eb842dead423cf4a3863be73a66465eb3835a4101862a28cbb42b217e450c9b19781d7d0fc1cc1714978963d39b14811b5c8f2159f4c0f11015dc8415"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x81, 0x3, "bf2a47"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "f0"}, &(0x7f0000000400)={0x20, 0x83, 0x2, "8f6f"}, &(0x7f0000000440)={0x20, 0x84, 0x4, "beffcac9"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "81f669"}}) 29.785506887s ago: executing program 2 (id=826): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000300)={0x0, 0x200000, 0x0, 0x401}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2000, @fd_index=0x6, 0x8d, 0x2, 0x6, 0x2, 0x0, {0x1}}) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x84) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) socket(0x3, 0x2, 0xffffffff) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000f9ffffff85000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random='\rh\x00 \x00'}) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffe, 0x442) socket(0x11, 0x800000003, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0xa, 0xf}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x10000c}]}}]}, 0x44}}, 0x40080c5) socket$inet6_tcp(0xa, 0x1, 0x0) 28.571931985s ago: executing program 1 (id=827): r0 = socket(0x2a, 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000040)=0xd758, 0x4) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)=@setlink={0x30, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40054}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0xf6800000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x20000000, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3], [0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0xb3a6, 0x0, 0x1, 0x1, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x134, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x76, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc61]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x128, 0x4c, 0x1a, 0x0, 0x73, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@private2, @dev, [], [], 'veth1_macvtap\x00', 'veth0_macvtap\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) ioctl$UI_DEV_CREATE(r3, 0x5501) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x402) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000102010300000000000000000a00000006000740000000003c0001802c000180140003"], 0x58}}, 0x0) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000100)=@ieee802154, 0x80, &(0x7f0000000740)=[{&(0x7f0000000280)="ac6e24f6f224ce2a611bfa32ba884c515ab156e330e9dae27aa5bf099930c60a702d", 0x22}, {&(0x7f00000002c0)="364cec611cc0ab585e1665395b82cfa24917388b97ebc417d2ea2eec2e7dcbf990a5aee321d996898c3e13006dd93a9e082cb6e264c0ded1fae1df30788718f24d709a304e137243b025aa659a88fbbcf07f359aea5f9371c72f66be5ea2b4fe2f0bfb657a24e6c76ac7c49bfad4bbe2d4cdcaeeebf67698292222a98baa136bd1d6da76362e7156cab4a670bc74", 0x8e}, {&(0x7f0000000400)="edcc79f3217877db71d96d166b83fea33c2d56b8d436464e5b6d0c0f13a6ffc986b57327cafafebf9fd9541ed47f30e8896a6cab9edad1f2d54c3f8aa321682e430d143a4481bfac6ab675af8a91cb4bc16d175845167ff58c3b61b06ec992617ef7e19acce27b9f65906d85f89352fde35fc7710f58d49bf9e92b2b95c47ddb2563a400866a05d2ab946e06a600eb35", 0x90}, {&(0x7f00000004c0)="3317437d8c6f798e5650f08f519b5dc6889923bdb5c90876a07925104a937b13b3cc66795195805d2a616df74cdbca60fcfeebfe3371115307e3dce9c51c19452254a2464b91827b18e92a61cb9c20e82f01c29563d5a63282cdd73d228fdba6a5ffab5541fa4fe805c3812aed96a996a2275c53a25c219a5810f43df75b38a3768dd49663faf4fe61677e1218c815c3db5c4ee21c12498d03320748686231b8cc0e982fe683beb11154bc3ec21d27165521022cd27fafc7112ab8486b6e9bd16735151ce3d5a47681e6b3eb24de087a20d3f4ff0117a39cfad165329ab7bba70623d61f1552367b4002a7ed34fcc99dcc97b0cbf0da3d6e1d", 0xf9}, {&(0x7f0000000380)="b61a4040204f000d4e59d12e9570ed9248cdeeda", 0x14}, {&(0x7f00000005c0)="317eaf1ce8b24d43145d7bfd78c1ba54ab090724b9cc84aa0feb2d0d20", 0x1d}, {&(0x7f0000000600)="97405b05ad9f48efa443383ce620a7574a1599ab6dd6d7862501fda8b030e76c74307a7eb1f9e4e3ba07797f42c1c68b4fd377d5140cbc6ce069d9713f6783d0a636212ac86f1db6cf9b88c7f7aa146a0c794dc2bb2253cde4bd2df5230209fe9bc5cab952a0", 0x66}, {&(0x7f0000000680)="1d142d8fe8c124b9aae0ae4461bf15dc1533511caf42a7c251082d4a5b24bf8e159d945d45c677cde179f06c3b7110483637e88ff3dfacf08ebc43bbe105e556275234c14f5719435a6e24b2b0a0d02fb94f2be272012295bfefa65450c0338f779f69753ca668a3a13c19c8113f98e458c42e7b85a20ead7704cf80b9273c3854b5e5461fa45213bdba10cc577be0a593545d9744a436f3119975aab25fd6a7f24af47f302b91029029873143", 0xad}], 0x8}, 0x41) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x111}}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r5}) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 28.432109767s ago: executing program 2 (id=828): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004740)=ANY=[@ANYBLOB="12010000000000406c256d00000000000001090224000100000000090400005203000000092100000001220500090581030000000000afb2eb9cdefb8ecf03ec231dc3a49b490190a025c448d30b4596f7a4b13de8d8afab82f74d793efb8cea86871a5b560b9d1891a7e260624be767a2b9d319da6cce07f813e53862ceee56f12d887f147b69d0"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0xd, 0xffffc025}]}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0xff, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4e479b03c28c7298, 0x0) recvmmsg(r6, &(0x7f0000008440)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/208, 0xd0}], 0x4}, 0x1}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000008700)=""/258, 0x102}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/47, 0x2f}, {&(0x7f0000001700)=""/29, 0x1d}, {&(0x7f0000001740)=""/60, 0x3c}], 0x6, &(0x7f0000001800)=""/151, 0x97}, 0x8001}, {{&(0x7f00000018c0)=@xdp, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001940)=""/27, 0x1b}, {&(0x7f0000001980)=""/34, 0x22}, {&(0x7f00000019c0)=""/6, 0x6}], 0x3}, 0x2e5}, {{&(0x7f0000001a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b00)=""/228, 0xe4}, {&(0x7f0000001c00)=""/65, 0x41}, {&(0x7f0000001c80)=""/121, 0x79}], 0x3, &(0x7f0000001d40)=""/161, 0xa1}, 0x4}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001e00)=""/159, 0x9f}], 0x1, &(0x7f0000001f00)=""/6, 0x6}, 0xffff}, {{&(0x7f0000001f40)=@hci, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000002040)=""/137, 0x89}, {&(0x7f0000002100)=""/236, 0xec}, {&(0x7f0000002200)=""/130, 0x82}], 0x3, &(0x7f00000022c0)=""/206, 0xce}, 0x5}, {{&(0x7f00000023c0)=@caif=@rfm, 0x80, &(0x7f0000003580)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000003540)=""/44, 0x2c}], 0x4}, 0x7}, {{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f00000035c0)=""/217, 0xd9}, {&(0x7f00000036c0)=""/121, 0x79}, {&(0x7f0000003740)=""/4096, 0x1000}, {0x0}, {&(0x7f0000004800)=""/119, 0x77}], 0x5, &(0x7f0000004900)=""/173, 0xad}}, {{&(0x7f00000049c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f0000006a40)=""/138, 0x8a}, {&(0x7f0000006b00)=""/202, 0xca}], 0x4, &(0x7f0000006c40)=""/172, 0xac}, 0x80000000}, {{0x0, 0x0, &(0x7f0000008280)=[{&(0x7f0000006d80)=""/158, 0x9e}, {&(0x7f0000008840)=""/171, 0xab}, {&(0x7f0000006f00)=""/133, 0x85}, {&(0x7f0000006fc0)=""/241, 0xf1}, {&(0x7f00000070c0)=""/75, 0x4b}, {&(0x7f0000007140)=""/4096, 0x1000}, {&(0x7f0000008140)=""/137, 0x89}, {&(0x7f0000008200)=""/1, 0x1}, {&(0x7f0000008240)=""/21, 0x15}], 0x9, &(0x7f0000008340)=""/225, 0xe1}, 0x5}], 0xa, 0x23, &(0x7f00000086c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600), 0x3b, 0x0, &(0x7f0000001800)}) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/32, 0x5}}], 0x196, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000780)="3f030e00031b12000000000089e9aaa911d7c2ff0700810000008100642c4a1b786100008d6b", 0x26, 0x0, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="0300"}, 0x14) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x74000000) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000280)=0xe0c, 0x4) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r11, &(0x7f0000001880)={0x2020}, 0x2020) socket$igmp6(0xa, 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 28.165505922s ago: executing program 1 (id=829): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000002600), 0x400, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3590bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d080000000000000014f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bdd277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabaf18647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15283217e03d02a4054f34af3a65ef6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a62bc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b391b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815501681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add38a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889581c750c34586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7004757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11c39d6fdcf5926d6ad5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a038813f2bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa500a0000000000006a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xfffffffffffffe43}}, 0x1006) r4 = socket$packet(0x11, 0x2, 0x300) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000180)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x30, 0x100000000}, &(0x7f0000002380)=0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) readv(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 28.059105065s ago: executing program 1 (id=830): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1}, 0x3) socket$unix(0x1, 0x5, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000001c0)={0x5, @pix_mp={0x83, 0x3, 0x3032344d, 0x7, 0x0, [{0x4, 0x3}, {0x2, 0x8}, {0x1ff}, {0x80000001, 0x2}, {0x3, 0x1f}, {0x4, 0x1}, {0x3, 0xb4e6}, {0x4, 0x979}], 0x1, 0x7, 0x7, 0x2}}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f0100000000"], 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000001c0)={0x13, 0x10, 0x10f, {0x0, r4}}, 0x18) futex(&(0x7f00000000c0)=0x2, 0xa, 0x1, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)=0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000014c0)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001200)="59fdbad0fb9a80ae3f02315c03e77e8ba9b781e7094a449d48b736879bf9f4b6c509c0151f08fdcc55fe97edd094bcc0ed3b33220dd7ec0e7b19e731c0600cb4e848bf043893881a113712d36e27ffa88a1fa9722b4aca6630ddcb2946255b62af2143552cdae260891784591d43d162b39473981137cf40d792192e9e13cac033", 0x81}], 0x1}], 0x1, 0x0) pread64(r0, &(0x7f0000000480)=""/177, 0xb1, 0x48) 25.921726791s ago: executing program 3 (id=837): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x200000000000000, 0x2) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{}, "10eae40036f465ec", "5b72e7f351595d23d24575126a56eab2840b81a1adc6d8cfc4e551163ff66dec", "1c05008d", "fa31024de00b1600"}, 0x38) r1 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{r0}, 0x20000000008, 0x471aad49}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (fail_nth: 8) 25.793488564s ago: executing program 3 (id=838): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) writev(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8, 0xfffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}]}}]}, 0xa4}}, 0x4044000) r5 = socket(0x11, 0x800000003, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000540)={{0x2, 0x5, 0x5, 0xffffffff, 'syz1\x00', 0x4}, 0x1, [0xa2, 0x400, 0x7fb, 0x1f, 0x0, 0x40, 0x60ad, 0x2, 0xbc41, 0x9, 0x3ff, 0xc, 0x9, 0x1ff, 0x7fff, 0x40, 0x9, 0x7, 0xa5, 0x7, 0x0, 0x7f, 0xfffffffffffffff9, 0x4, 0x0, 0x4, 0x5, 0x401, 0x8001, 0x4, 0x8, 0x616, 0x6, 0x7, 0x8000000000000001, 0x93, 0x80000000, 0xffffffffffffffff, 0x100000000, 0x5, 0x3, 0x5, 0x5, 0x7fff, 0xffff, 0x9, 0x8, 0xffffffffffffffff, 0x6, 0x1, 0x8000000000000001, 0x100000000, 0x2336, 0x40001, 0xfffffffffffffc01, 0x2, 0x0, 0x7fdf, 0x4, 0x1f, 0xfffffffffffffffa, 0x7fd, 0x4, 0x539, 0x0, 0xffffffff00000000, 0x3ff, 0x8000000000000000, 0x0, 0x1, 0xfffffffffffffffb, 0x517, 0x80000001, 0x1, 0x3ff, 0x26ecfffb, 0xff, 0x0, 0x5, 0x7f, 0x9, 0x80000040, 0x3, 0x81, 0xfffffffffffffffe, 0x0, 0x32d, 0x0, 0x4, 0x1c00000, 0x400000000400, 0x5, 0x10000, 0xd4e6, 0x81, 0x1fb, 0xfffffffffffff001, 0xffff, 0x0, 0x3, 0x1, 0x6, 0x0, 0x7, 0x9, 0x6, 0x9, 0xc90, 0x0, 0x4ab, 0x2, 0xfffffffffffffff9, 0x7fff, 0x1ff, 0x2a78, 0xcda0, 0x0, 0x10001, 0x3ff, 0xe30, 0x6, 0x8, 0x83, 0x8000000000000000, 0xf3d7, 0x0, 0x800000000003, 0x3071]}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$key(0xf, 0x3, 0x2) recvmmsg(r8, &(0x7f0000004980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98}, 0xfffffff9}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004580)=""/10, 0xa}, 0x10001}], 0x2, 0x2000000022, 0x0) setsockopt$sock_int(r8, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}}, 0x0) syz_io_uring_setup(0x437a, 0x0, 0x0, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000200)=""/79, &(0x7f0000000080)=0x4f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r11 = socket$unix(0x1, 0x2, 0x0) connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) umount2(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x6) writev(r11, &(0x7f0000000040), 0x0) recvmmsg(r10, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 25.18700518s ago: executing program 0 (id=842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) unshare(0x8020480) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x240, 0x168, 0x9, 0x168, 0xb, 0x240, 0x250, 0x250, 0x240, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_to_bond\x00', 'sit0\x00'}, 0x6000000, 0xe0, 0x140, 0x0, {0x0, 0x28e}, [@common=@unspec=@statistic={{0x38}, {0x100}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r2 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000001680)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c0000000800090581030002000000090401b1"], 0x0) syz_open_dev$vcsa(&(0x7f0000001500), 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="2800000035728c94125a738a272d0f7e704f000107000000000000000010000020e5e24b34e5a402e34c14c5e56ee47d747785db2a32be1081856cd7cd76c3afd4035165ba65963cc39496cfb34c6f607867adbc73fd7e3b37c079d5b4d8aed9dc9ab12c64a762640d0d3e127720060c3642a9f068141799f07893741b2bbddb75cab315d9d5ad09240c2783555e8c186014e0300edf8e68e1f19218aa015014e5b8c607b147d7aefbdf53e1e32297672feb5fdf03c505"], 0x14}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x40}, 0x5f, &(0x7f0000000f40)=ANY=[@ANYBLOB="05"], 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000001580)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r4 = syz_usb_connect$uac1(0x3, 0xfb, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x3, 0x1, 0x9, 0x50, 0x15, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5}, [@processing_unit={0xc, 0x24, 0x7, 0x6, 0x2, 0xda, "f4deb60e19"}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x40, 'W'}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x101, 0x6, 0x4, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x201, 0x5, 0x8b, 0x8, 0x0, 0x1}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x5, 0x6, [0x8, 0x8, 0x1, 0x9, 0x6, 0x4], 0x2}, @feature_unit={0x7, 0x24, 0x6, 0x2, 0x1, 0x0, [], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xc, 0x1, 0x7, 0x2, "43b06f170a5557f8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x0, 0xae, {0x7, 0x25, 0x1, 0x0, 0xd, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xb2, 0x9, 0x8, "a3a5e8df69b2"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x77, 0x2}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xc, 0x2, 0x2, 0x5}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xfb, 0x1, 0x1, 0x9, "92b95290517784"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x4, 0x200, 0x3f, "0dcc49"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x87, 0xfe, 0xbb, {0x7, 0x25, 0x1, 0x82, 0x8, 0xef}}}}}}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000a00)={0x2c, &(0x7f0000000740)={0x0, 0x1, 0xd0, {0xd0, 0x22, "f84416ea5708d358b4717dc1928e39d0f0dadf86625befae192bd07a7fbac6f5e405d61ebd35a0a748a88ff4b99ab6ff721d7a7bd70fd951c98b91666ad76b8da920a0aa674ef1a4bdd7c31f10ca361ea7e37279c8b4a08a1d283f4fa61893dc7b527376c6eabd13c2082768b2de594e3e2bd78e243389b95d1ae8d89d1f1d5416488181f930fbb4a8194abebd9b369385fa82afa37ccdaf6b350ee02bd3c74ce369701959d4a978e45eaae4d470b2c734efc82c8b05f5bfc3d8424718d5bd6cefffe5ad04f7fbbf89029ac4855e"}}, &(0x7f0000000400)=ANY=[@ANYBLOB="00035d0000005d03480c59b80b31b59b2a9cffabbe2cfe35055dfbc8432e48ec983017af8e69a21ea35b3ab05e255480f04bb1ff4dbd44fe8b9bbf38ad3ab8fe1c36d786dfadcacf060231220181c05656dcd1593a60ba46523d0cbfcab683fb609f4bd25c4c7edd43071e8e6da32c59c5dfc009f5bbeda811b2179c52ce829ea15092369afe345a1aad8c140c80d4ac9a308fc015a64c1bab608170e6e6cfce5cbeb0a025f77802144149e488853d106031b9433c720d65301cc14a42e1e5d586ae120e880993f7b3adc724d8db21408f"], &(0x7f0000000900)={0x0, 0xf, 0x6e, {0x5, 0xf, 0x6e, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xa0, 0xd6, 0x5}, @generic={0x5f, 0x10, 0xa, "729babe268919c44bf53a2e14e4cefde365b2125675ef6d1e6dbe665e495542fe31847d5ecf541af8e3a033052e404f4d1b6c7502c8d873f46bd32984f2304f3957e80fa64684562ac6c8bf4c08b2de660f2101204efb204984fe5f0"}]}}, &(0x7f0000000980)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x4, 0x7, "80ad90db", "68b632cd"}}, &(0x7f00000009c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1, 0x9, 0x7f, 0x9, 0x8, 0x7e}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="20155e000000ff82422080172ddcffc5740446bf00bf487352276e259c502f938375747d339785299ed4997c4e15daefa45ee8224da451f3db897f2ead848d33bbc0748a1c00ce28913493805ea458348b87cf4a78520275f57ca86fc702e63bf0c8c7de", @ANYRES32=r4], &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0xe1}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000b80)=ANY=[@ANYBLOB='\x00'/10], &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0x43d9}, &(0x7f00000001c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "f9b6"}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0x8000}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, &(0x7f0000000d00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, &(0x7f0000000d40)={0x40, 0x19, 0x2, '98'}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x40}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x401, 0x0, 0x1, {0x22, 0x229}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xdc}}}}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x0, 0x0}) ptrace(0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, 0x0, 0x0) socket(0x2a, 0x2, 0x0) 24.932893651s ago: executing program 1 (id=843): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) r1 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, 0x0, 0xffffffffffffffff) syz_clone3(0x0, 0x0) timer_create(0x7, &(0x7f00000004c0)={0x0, 0x3d, 0x1}, &(0x7f0000000500)) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000000c1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x3432564e}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0xd, 0x1c00, 0xa, @private2, @private1, 0x8000, 0x80, 0x7, 0xceb3}}) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc5e4ff8624715c4b}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd2c, 0x25dfdbfd, {0x7, r3}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40800) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x3a, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 24.888342978s ago: executing program 2 (id=844): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x4000090) 24.847525892s ago: executing program 1 (id=845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xfff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0xe0}}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="14001f001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a3000000000090001"], 0x4b0}}, 0x0) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe) syz_open_dev$cec(0x0, 0x0, 0x321001) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x40c32aec156fcff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r7, 0x0, 0x17) r8 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r8, &(0x7f0000000b40)={0x2020}, 0x2020) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x100f5, 0x8, 0x0, 0x0}}, 0x10) 24.747695598s ago: executing program 3 (id=847): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = syz_clone(0x4202200, &(0x7f0000000000)="06155d1da443897b8b91b94ab597127ce526f6c4ddaab231a9fa516c805f1980e9d0de6ac7018359a34e3ec14f406201be2f38360bf1b948cf94db94130a07723f2d33885537795e8b89929f61870ada46170af280fd40574c7fde35416ff6e96a615bec718e8cacacd2ca1a232726dfd14146c7de2dcb0346e474e0b38f491329ee22d629c65a34b61337be5592752e7202b64d1cae54ffec3e653a419a44cfba3f9d4c3f95c2e25d4c62203d4acda32e2431b9ccf6aa15b176bce76a7ff164", 0xc0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="e3e9a8b2061423697ced898c4adfb586c3a2c0874eabc44e74404e20fe5f3b7bd420b5ca1585f772e443b5ef4341adcb62da20d61bfefe9ca2e98effba42c7c73ef74f3a9ccc66ee6157008a670d8cf020168724b84922bb76f9e3172a8f9f8a153e6bc3fb06fef6f06bbe5999a3373eecce18f9fff81be0f9fb9ab7ba1613b2f99dfe6e9ede42b4f760ff9aa1a4e41a6b6448453d30d5f63b797d2b6937b36c9b41946e89c459284587975abe8f1c39fed246c02725f34702b043830426fca7ad412950852df3ef27be3ea4ec595cb33f7ce85cfdee2cbee08b") ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x8001, 0x6, 0x19f2, 0x1, 0x4, r2}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4a, &(0x7f0000000000)={0x0, 0x0}, 0x10) tgkill(r2, r2, 0x30) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) syz_io_uring_setup(0x5d71, &(0x7f0000000440)={0x0, 0x0, 0x10700}, &(0x7f0000000200), &(0x7f0000000140)=0x0) unshare(0x22020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r6, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) write(r6, &(0x7f0000000500)="1400000016004f7fb3e4bf80a000080040030000", 0x14) r7 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80 \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\x0e\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0x0, &(0x7f0000000100)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000300), 0x881) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r9, 0x4004510f, &(0x7f00000000c0)={"d8582add900600", 0x40}) r10 = syz_io_uring_setup(0x1000239, &(0x7f0000000080)={0x0, 0x2, 0x80, 0x0, 0x25a}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x502}, 0x0, {0x0, r13}}) syz_io_uring_submit(r8, r5, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd_index=0x8, 0x5, 0x0, 0x0, 0x15, 0x0, {0xffff, r13}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', 0x0}) 24.529781651s ago: executing program 2 (id=858): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x4000090) 23.250909251s ago: executing program 2 (id=849): syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x40}}, 0x0) 22.72792758s ago: executing program 3 (id=850): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000002600), 0x400, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) r4 = socket$packet(0x11, 0x2, 0x300) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000180)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x30, 0x100000000}, &(0x7f0000002380)=0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) readv(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 21.685717025s ago: executing program 0 (id=851): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x5008, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x0, 0xb5, 0xe1, 0x45}}]}}]}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x1000000, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e060cff"], 0x9) 21.094096763s ago: executing program 3 (id=852): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fsopen(&(0x7f0000000040)='efs\x00', 0x0) sendmmsg$inet(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}}], 0x2, 0x4c040) 18.377656178s ago: executing program 2 (id=853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x200) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) fremovexattr(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="6ff3322eff"]) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"]}, 0xa38) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x25, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @private2, 0x3}}, 0x5, 0x80, 0x8000, 0x0, 0x18, 0x4, 0xfc}, 0x9c) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c00000010001fff000000257f4c7c0000001a43", @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800b00010069703667726500003c0002800800150047e1060014000700fe880000000600000000000000000101080005000300000014000700fe8000000000000004000000000000aa08001a00a3fe42e53a2707b0d6468afa98274a8d54832234a47774dde49826fb38797da52535da15263f7cc894199c30f773eb442749e757d455e2eae0915433949a50dd238aec757090e29ab73fb0447a8b0a188f061478822c1a493cd3c8143d271b6aa5c576e419dd808291092fab911e322e6cc9473d4468903b0c4a8b9d8c3a149449271bf0a4848c23c962a194bd93292335c1eb797c6b59167a57a60794e884268e3dbf3c0124412f664ab74eddbe17462ed04bb565f2edc8a51fe25513c15e7b76f71f66320f045c6fd9c4179459e14f", @ANYRES32=r3], 0x7c}, 0x1, 0x0, 0x0, 0x24040814}, 0x40884) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x42}, 0x10) sendmsg$tipc(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc084) shutdown(r7, 0x2) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) r8 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000005e00000000000800000000000c000000010000000000008005000180de000000"], 0x24}], 0x1}, 0x0) io_uring_enter(r8, 0x48e9, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x2) ioctl$FBIOBLANK(r2, 0x4611, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 17.773761214s ago: executing program 0 (id=854): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x814, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local, {[@noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 17.484482553s ago: executing program 0 (id=855): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) r1 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, 0x0, 0xffffffffffffffff) syz_clone3(0x0, 0x0) timer_create(0x7, &(0x7f00000004c0)={0x0, 0x3d, 0x1}, &(0x7f0000000500)) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000000c1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x3432564e}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0xd, 0x1c00, 0xa, @private2, @private1, 0x8000, 0x80, 0x7, 0xceb3}}) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc5e4ff8624715c4b}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd2c, 0x25dfdbfd, {0x7, r3}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40800) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x3a, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 17.346592957s ago: executing program 3 (id=856): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xd80, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x27fd, 0x2800, 0x440, 0xd1, 0xa, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xc}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, 0x0, 0x11) socket(0x2, 0x3, 0x100000001) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, 0x0, 0x0) 16.861517718s ago: executing program 0 (id=857): landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x1}, 0x10, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f00000000c0)=@keyring) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYRES16=r1, @ANYRES16=r0], 0x0) 13.253919457s ago: executing program 0 (id=861): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000340)=""/161) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x3e, &(0x7f0000001b80)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x4, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @local}}}}}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0b18e3fbb91286cd643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, r5, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r3, &(0x7f0000012cc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r6}, 0x10) syz_fuse_handle_req(r3, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x9, 0x0, 0xc, 0xfffffffffffffffd, 0x4, 0xe, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x60}}}, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r4, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0x40405515, &(0x7f0000000140)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101"], 0x0) 11.345428627s ago: executing program 4 (id=862): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f00000002c0)='1', 0x1) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x105080, 0x18d) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8555}}, [0x100000000, 0xe8df, 0x6, 0x200, 0xe, 0x40, 0x100000000, 0x0, 0xfffffffeffffffff, 0x3, 0x2, 0x7c, 0xffffffff, 0x5, 0x3]}, &(0x7f0000000240)=0x100) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x29, 0x4e, 0x76, 0x10, 0x6cd, 0x202, 0xf498, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x6, 0xd0, 0x6, [{{0x9, 0x4, 0x4f, 0x6, 0x2, 0x81, 0x6a, 0x2, 0x0, [], [{{0x9, 0x5, 0xf, 0xc, 0x200, 0xfd, 0xd6, 0x3}}, {{0x9, 0x5, 0xeac52930e4ba5b07, 0x13, 0x200, 0x40, 0x81, 0x2}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 7.393611242s ago: executing program 4 (id=864): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000800)="b74ce4bbb9358c29c60ff0716cb041286c6abae64d797b9c1478dd86e08bd666", 0x20}, {&(0x7f0000000840)="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", 0x5a5}], 0x2}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1, 0x3, {0x2, 0xff, 0x3}, 0xff}, 0x18) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x1) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003090426080905120828910102030109022400010302c000a37c2b3a026e5cc40109050a03100081071509050f0f00025c0804"], &(0x7f0000000c40)={0x0, 0x0, 0x15, 0x0}) 5.487367036s ago: executing program 4 (id=866): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x80, 0x4800003e, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)={{0x12, 0x1, 0x351, 0x29, 0xfb, 0xf0, 0x40, 0x738, 0x4540, 0xc6ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x2, 0x6, 0x10, 0x78, [{{0x9, 0x4, 0xd4, 0x9, 0x1, 0x78, 0x6d, 0x3d, 0x40, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x9, 0x4, 0x2}}]}}, {{0x9, 0x4, 0xe2, 0x0, 0x2, 0xb2, 0x26, 0x18, 0xbb, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x7c, 0x9e, 0x9, [@generic={0x7, 0x5, "85e371932d"}]}}, {{0x9, 0x5, 0x7, 0xb, 0x0, 0x9, 0x73, 0x3}}]}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 3.573335261s ago: executing program 4 (id=867): r0 = socket$key(0xf, 0x3, 0x2) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000200200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000000000030200000020030005000000000002000000ac1414aa00000000000000000a000800"], 0xb0}, 0x1, 0x7}, 0x0) 2.812792652s ago: executing program 4 (id=869): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 4 (id=870): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x0, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000280)=""/4096, 0x1000, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000100)="b9ff", 0x0, 0xb000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): st usb[type=0 value=1] err=-71 [ 436.770198][ T5285] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 436.838560][ T5285] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 436.861724][ T9113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 436.869367][ T5285] usb 5-1: USB disconnect, device number 66 [ 436.915991][ T9113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 436.965156][ T9113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 437.020503][ T9113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 437.045154][ T8176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.069341][ T8176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.088941][ T9048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.144985][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.153012][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.283466][ T9048] veth0_vlan: entered promiscuous mode [ 437.326390][ T9048] veth1_vlan: entered promiscuous mode [ 437.335345][ T9166] netlink: 'syz.0.635': attribute type 7 has an invalid length. [ 437.377866][ T9113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.398776][ T9048] veth0_macvtap: entered promiscuous mode [ 437.441761][ T9048] veth1_macvtap: entered promiscuous mode [ 437.487955][ T9113] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.523603][ T8176] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.530847][ T8176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.605053][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.644963][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.673523][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.694275][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.699217][ T5286] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 437.712240][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.732661][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.752445][ T9048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.762157][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.769344][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.797865][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.823285][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.833489][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.876488][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.896430][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 437.918164][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.928047][ T9048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.939925][ T9048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.949515][ T5286] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.973889][ T5286] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 437.996072][ T9048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.017509][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.019423][ T5286] usb 1-1: config 0 descriptor?? [ 438.027240][ T9048] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.027278][ T9048] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.027305][ T9048] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.027332][ T9048] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.261539][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.261567][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.339389][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.339445][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.386974][ T9113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.456429][ T5286] corsair-cpro 0003:1B1C:1D00.001D: unbalanced collection at end of report description [ 438.456744][ T5286] corsair-cpro 0003:1B1C:1D00.001D: probe with driver corsair-cpro failed with error -22 [ 438.498802][ T9113] veth0_vlan: entered promiscuous mode [ 438.514861][ T5232] Bluetooth: hci1: command tx timeout [ 438.540071][ T9113] veth1_vlan: entered promiscuous mode [ 438.766509][ T9113] veth0_macvtap: entered promiscuous mode [ 438.794691][ T9113] veth1_macvtap: entered promiscuous mode [ 438.810315][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.828143][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.838254][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.848811][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.858787][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.869389][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.879310][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.889870][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.905059][ T9113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.918092][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.928875][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.939134][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.944299][ T47] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 438.949653][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.967436][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.982818][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.995782][ T9113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.006535][ T9113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.018091][ T9113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.032344][ T9113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.042299][ T9113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.051854][ T9113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.062095][ T9113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.064345][ T5283] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 439.120552][ T9208] netlink: 3 bytes leftover after parsing attributes in process `syz.0.635'. [ 439.133641][ T9208] 0ªX¹¦À: renamed from caif0 [ 439.173616][ T9208] 0ªX¹¦À: entered allmulticast mode [ 439.191011][ T9208] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 439.263263][ T47] usb 3-1: unable to get BOS descriptor or descriptor too short [ 439.296184][ T5283] usb 4-1: Using ep0 maxpacket: 8 [ 439.308649][ T47] usb 3-1: not running at top speed; connect to a high speed hub [ 439.319630][ T5283] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 439.338545][ T47] usb 3-1: config 3 has an invalid descriptor of length 163, skipping remainder of the config [ 439.354449][ T5283] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 439.363829][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.387441][ T47] usb 3-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 439.414476][ T5283] usb 4-1: Product: syz [ 439.429485][ T47] usb 3-1: New USB device found, idVendor=0509, idProduct=0812, bcdDevice=91.28 [ 439.441837][ T5283] usb 4-1: Manufacturer: syz [ 439.452443][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.461321][ T5283] usb 4-1: SerialNumber: syz [ 439.466424][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.487494][ T47] usb 3-1: Product: syz [ 439.494275][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.502504][ T5283] usb 4-1: config 0 descriptor?? [ 439.511404][ T47] usb 3-1: Manufacturer: syz [ 439.523057][ T5283] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 439.534412][ T47] usb 3-1: SerialNumber: syz [ 439.739052][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.766156][ T47] usb 3-1: USB disconnect, device number 51 [ 439.808690][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.201092][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.208812][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.235198][ T5283] gspca_zc3xx: reg_w_i err -110 [ 440.347337][ T5286] usb 1-1: USB disconnect, device number 53 [ 440.404240][ T47] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 440.509689][ T9234] fuse: Unknown parameter '0x00000000000000030x0000000000000004' [ 440.564373][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 440.571667][ T9235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.581531][ T9235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.583278][ T47] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 440.606038][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.614082][ T47] usb 2-1: Product: syz [ 440.622907][ T47] usb 2-1: Manufacturer: syz [ 440.637856][ T47] usb 2-1: SerialNumber: syz [ 440.655252][ T47] usb 2-1: config 0 descriptor?? [ 440.804269][ T5286] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 440.824881][ T5283] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 440.841544][ T5283] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 440.884682][ T9226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.899505][ T9226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.921493][ T47] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 440.932076][ T47] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 440.966638][ T5286] usb 1-1: no configurations [ 440.971284][ T5286] usb 1-1: can't read configurations, error -22 [ 441.007654][ T47] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 441.019815][ T47] usb 2-1: USB disconnect, device number 74 [ 441.138702][ T5286] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 441.221993][ T9247] batman_adv: batadv0: Adding interface: geneve0 [ 441.230158][ T9247] batman_adv: batadv0: Not using interface geneve0 (retrying later): interface not active [ 441.307245][ T5286] usb 1-1: no configurations [ 441.311907][ T5286] usb 1-1: can't read configurations, error -22 [ 441.320435][ T5286] usb usb1-port1: attempt power cycle [ 441.527145][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 441.536238][ T8] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 441.548143][ T9252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.680'. [ 441.664986][ T5286] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 441.670272][ T9258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.692234][ T5286] usb 1-1: no configurations [ 441.698124][ T5286] usb 1-1: can't read configurations, error -22 [ 441.717729][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 441.731706][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.742326][ T8] usb 5-1: config 0 descriptor?? [ 441.755315][ T8] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35 [ 441.864393][ T5286] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 441.905579][ T5286] usb 1-1: no configurations [ 441.910263][ T5286] usb 1-1: can't read configurations, error -22 [ 441.924600][ T5286] usb usb1-port1: unable to enumerate USB device [ 441.944399][ T5283] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 442.035892][ T5232] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 442.046823][ T5232] Bluetooth: hci3: Injecting HCI hardware error event [ 442.056826][ T5235] Bluetooth: hci3: hardware error 0x00 [ 442.120036][ T5283] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 442.129483][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.137837][ T5283] usb 2-1: Product: syz [ 442.142341][ T5283] usb 2-1: Manufacturer: syz [ 442.147381][ T5283] usb 2-1: SerialNumber: syz [ 442.174589][ T5283] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 442.272674][ T5285] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 442.296152][ T4673] bcm5974 5-1:0.0: could not read from device [ 442.331983][ T4673] bcm5974 5-1:0.0: could not read from device [ 442.357025][ T8] usb 5-1: USB disconnect, device number 67 [ 442.371388][ T4673] bcm5974 5-1:0.0: could not read from device [ 442.403508][ T8583] bcm5974 5-1:0.0: could not read from device [ 442.452601][ T8583] udevd[8583]: Error opening device "/dev/input/event4": No such file or directory [ 442.466227][ T5286] usb 4-1: USB disconnect, device number 72 [ 442.477656][ T8583] udevd[8583]: Unable to EVIOCGABS device "/dev/input/event4" [ 442.498517][ T8583] udevd[8583]: Unable to EVIOCGABS device "/dev/input/event4" [ 442.520186][ T8583] udevd[8583]: Unable to EVIOCGABS device "/dev/input/event4" [ 442.550069][ T8583] udevd[8583]: Unable to EVIOCGABS device "/dev/input/event4" [ 443.204384][ T47] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 443.317785][ T5285] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 443.327887][ T5285] ath9k_htc: Failed to initialize the device [ 443.362699][ T5285] usb 2-1: ath9k_htc: USB layer deinitialized [ 443.371503][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 443.389503][ T47] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 443.421869][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 443.469652][ T47] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.547190][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.568239][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 443.623164][ T5286] usb 2-1: USB disconnect, device number 75 [ 443.669982][ T47] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 443.677768][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 443.695140][ T47] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.723670][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.742971][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 443.769889][ T47] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 443.782224][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 443.812132][ T47] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.859121][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.888375][ T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 443.928308][ T47] usb 4-1: string descriptor 0 read error: -22 [ 443.949979][ T47] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 443.964254][ T5284] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 443.973080][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.998708][ T47] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 444.115514][ T5235] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 444.146033][ T5284] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 444.159279][ T5284] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 444.169249][ T5284] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 444.180199][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.217064][ T9291] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 444.226260][ T5284] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 444.333645][ T9298] FAULT_INJECTION: forcing a failure. [ 444.333645][ T9298] name failslab, interval 1, probability 0, space 0, times 0 [ 444.373599][ T9298] CPU: 0 UID: 0 PID: 9298 Comm: syz.4.686 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 444.384775][ T9298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 444.395051][ T9298] Call Trace: [ 444.398360][ T9298] [ 444.401309][ T9298] dump_stack_lvl+0x241/0x360 [ 444.406137][ T9298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.411365][ T9298] ? __pfx__printk+0x10/0x10 [ 444.415972][ T9298] ? fs_reclaim_acquire+0x93/0x130 [ 444.421082][ T9298] ? __pfx___might_resched+0x10/0x10 [ 444.426372][ T9298] should_fail_ex+0x3b0/0x4e0 [ 444.431051][ T9298] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 444.436772][ T9298] should_failslab+0xac/0x100 [ 444.441459][ T9298] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 444.447178][ T9298] __kmalloc_noprof+0xd8/0x400 [ 444.451948][ T9298] tomoyo_realpath_from_path+0xcf/0x5e0 [ 444.457505][ T9298] tomoyo_path_number_perm+0x23a/0x880 [ 444.462975][ T9298] ? tomoyo_path_number_perm+0x208/0x880 [ 444.468618][ T9298] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 444.474667][ T9298] ? __fget_files+0x29/0x470 [ 444.479276][ T9298] ? __fget_files+0x3f3/0x470 [ 444.483953][ T9298] security_file_ioctl+0xc6/0x2a0 [ 444.489084][ T9298] __se_sys_ioctl+0x47/0x170 [ 444.493698][ T9298] do_syscall_64+0xf3/0x230 [ 444.498217][ T9298] ? clear_bhb_loop+0x35/0x90 [ 444.502904][ T9298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.508806][ T9298] RIP: 0033:0x7fc07097dff9 [ 444.513223][ T9298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.532870][ T9298] RSP: 002b:00007fc0716c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.541297][ T9298] RAX: ffffffffffffffda RBX: 00007fc070b35f80 RCX: 00007fc07097dff9 [ 444.549278][ T9298] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000003 [ 444.557253][ T9298] RBP: 00007fc0716c8090 R08: 0000000000000000 R09: 0000000000000000 [ 444.565243][ T9298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.573215][ T9298] R13: 0000000000000000 R14: 00007fc070b35f80 R15: 00007fc070c5fa28 [ 444.581197][ T9298] [ 444.638343][ T5285] usb 1-1: USB disconnect, device number 58 [ 444.673345][ T8359] udevd[8359]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.720245][ T9298] ERROR: Out of memory at tomoyo_realpath_from_path. [ 445.274747][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.446917][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.617344][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.766942][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.953099][ T9315] binder: 9312:9315 ioctl c018620c 20000340 returned -22 [ 446.208140][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 446.240956][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 446.250175][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 446.267443][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 446.304362][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 446.313308][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.410693][ T11] bridge_slave_1: left allmulticast mode [ 446.423500][ T11] bridge_slave_1: left promiscuous mode [ 446.447077][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.476425][ T5284] usb 4-1: USB disconnect, device number 73 [ 446.559838][ T11] bridge_slave_0: left allmulticast mode [ 446.584598][ T11] bridge_slave_0: left promiscuous mode [ 446.590414][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.985151][ T5285] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 447.204652][ T5285] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 447.272673][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 447.419613][ T5285] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 447.429214][ T5284] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 447.464352][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.493161][ T5285] usb 4-1: config 0 descriptor?? [ 447.523458][ T5285] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 447.734539][ T5284] usb 1-1: Using ep0 maxpacket: 16 [ 447.754335][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.774271][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.794657][ T5284] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 447.832055][ T5284] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 447.850527][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.872534][ T5284] usb 1-1: config 0 descriptor?? [ 447.956617][ T9350] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 448.104009][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.141574][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.203049][ T11] bond0 (unregistering): Released all slaves [ 448.300458][ T5284] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 448.323992][ T5284] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 448.354382][ T5235] Bluetooth: hci1: command tx timeout [ 448.388474][ T5284] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 448.564678][ T5284] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 448.572050][ T5284] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 448.579904][ T5284] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 448.587937][ T5284] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 448.654485][ T5284] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 448.662236][ T5284] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 448.670299][ T5284] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 448.678715][ T5284] microsoft 0003:045E:07DA.001E: No inputs registered, leaving [ 448.687977][ T5284] microsoft 0003:045E:07DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 448.699522][ T5284] microsoft 0003:045E:07DA.001E: no inputs found [ 448.706358][ T5284] microsoft 0003:045E:07DA.001E: could not initialize ff, continuing anyway [ 449.004481][ T11] hsr_slave_0: left promiscuous mode [ 449.015833][ T11] hsr_slave_1: left promiscuous mode [ 449.026036][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.038658][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.048222][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.060700][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.080041][ T5285] usb 1-1: USB disconnect, device number 59 [ 449.093181][ T11] veth1_macvtap: left promiscuous mode [ 449.107757][ T11] veth0_macvtap: left promiscuous mode [ 449.129317][ T11] veth1_vlan: left promiscuous mode [ 449.136105][ T11] veth0_vlan: left promiscuous mode [ 449.174441][ T5284] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 449.351492][ T9376] Cannot find add_set index 0 as target [ 449.358461][ T5284] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 449.373774][ T5284] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.399576][ T5284] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.427416][ T5284] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.449620][ T5284] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.484055][ T5284] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.515172][ T5284] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.543295][ T5284] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.564274][ T5284] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.583387][ T5284] usb 5-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=50.61 [ 449.594901][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=66, SerialNumber=167 [ 449.603236][ T5284] usb 5-1: Product: syz [ 449.607605][ T5284] usb 5-1: Manufacturer: syz [ 449.623513][ T5284] usb 5-1: SerialNumber: syz [ 449.643924][ T5284] usb 5-1: config 0 descriptor?? [ 449.758081][ T8372] usb 4-1: USB disconnect, device number 74 [ 450.312069][ T9382] AppArmor: change_hat: Invalid input 'p' [ 450.429521][ T11] team0 (unregistering): Port device team_slave_1 removed [ 450.435766][ T5235] Bluetooth: hci1: command tx timeout [ 450.619780][ T11] team0 (unregistering): Port device team_slave_0 removed [ 450.844412][ T8372] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 450.887054][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 450.915110][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 450.931497][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 450.958948][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 450.967010][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 450.975707][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 451.021976][ T8372] usb 4-1: unable to get BOS descriptor or descriptor too short [ 451.049890][ T8372] usb 4-1: not running at top speed; connect to a high speed hub [ 451.060509][ T8372] usb 4-1: config 3 has an invalid descriptor of length 163, skipping remainder of the config [ 451.083638][ T8372] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 451.127039][ T8372] usb 4-1: New USB device found, idVendor=0509, idProduct=0812, bcdDevice=91.28 [ 451.146228][ T8372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.154644][ T8372] usb 4-1: Product: syz [ 451.159136][ T8372] usb 4-1: Manufacturer: syz [ 451.163763][ T8372] usb 4-1: SerialNumber: syz [ 451.381963][ T8372] usb 4-1: USB disconnect, device number 75 [ 452.108389][ T8372] usb 5-1: USB disconnect, device number 68 [ 452.118565][ T9323] chnl_net:caif_netlink_parms(): no params data found [ 452.254025][ T9402] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 452.260607][ T9402] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 452.315069][ T9402] vhci_hcd vhci_hcd.0: Device attached [ 452.519871][ T5235] Bluetooth: hci1: command tx timeout [ 452.586706][ T47] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 452.608424][ T9387] chnl_net:caif_netlink_parms(): no params data found [ 452.624561][ T8] usb 15-1: new high-speed USB device number 4 using vhci_hcd [ 452.649655][ T9323] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.667221][ T9323] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.684522][ T9323] bridge_slave_0: entered allmulticast mode [ 452.695371][ T9323] bridge_slave_0: entered promiscuous mode [ 452.721682][ T9323] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.742036][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.749639][ T9323] bridge_slave_1: entered allmulticast mode [ 452.757772][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 452.764419][ T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.775129][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.793441][ T9323] bridge_slave_1: entered promiscuous mode [ 452.802522][ T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 452.812198][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.822431][ T5284] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 452.848988][ T47] usb 4-1: Product: syz [ 452.855515][ T47] usb 4-1: Manufacturer: syz [ 452.863573][ T47] usb 4-1: SerialNumber: syz [ 452.903275][ T9323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.013678][ T9323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.054988][ T5284] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 453.064771][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.074306][ T5235] Bluetooth: hci5: command tx timeout [ 453.102076][ T5284] usb 5-1: Product: syz [ 453.120237][ T5284] usb 5-1: Manufacturer: syz [ 453.131765][ T5284] usb 5-1: SerialNumber: syz [ 453.139208][ T5284] usb 5-1: config 0 descriptor?? [ 453.166231][ T9323] team0: Port device team_slave_0 added [ 453.228642][ T9323] team0: Port device team_slave_1 added [ 453.275594][ T9387] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.282774][ T9387] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.292993][ T9387] bridge_slave_0: entered allmulticast mode [ 453.300778][ T9387] bridge_slave_0: entered promiscuous mode [ 453.313008][ T9323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.327565][ T9323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.354028][ T9323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.370513][ T9387] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.396443][ T9387] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.403731][ T9387] bridge_slave_1: entered allmulticast mode [ 453.420282][ T5303] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 453.455398][ T9387] bridge_slave_1: entered promiscuous mode [ 453.470178][ T9323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.484421][ T9323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.526647][ T9323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.568650][ T5284] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 453.597568][ T5303] usb 1-1: unable to get BOS descriptor or descriptor too short [ 453.603847][ T5284] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 453.611009][ T5303] usb 1-1: not running at top speed; connect to a high speed hub [ 453.626735][ T9387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.656026][ T5284] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19) [ 453.660186][ T5303] usb 1-1: config 3 has an invalid descriptor of length 163, skipping remainder of the config [ 453.699571][ T5303] usb 1-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 453.736747][ T9387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.765676][ T5303] usb 1-1: New USB device found, idVendor=0509, idProduct=0812, bcdDevice=91.28 [ 453.781852][ T9423] netlink: 44 bytes leftover after parsing attributes in process `syz.4.712'. [ 453.791742][ T5303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.807465][ T5303] usb 1-1: Product: syz [ 453.821176][ T9323] hsr_slave_0: entered promiscuous mode [ 453.834849][ T5303] usb 1-1: Manufacturer: syz [ 453.846512][ T8372] usb 5-1: USB disconnect, device number 69 [ 453.857118][ T9323] hsr_slave_1: entered promiscuous mode [ 453.870426][ T5303] usb 1-1: SerialNumber: syz [ 453.878660][ T9323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.888646][ T9323] Cannot create hsr debugfs directory [ 453.960562][ T9387] team0: Port device team_slave_0 added [ 454.060934][ T9387] team0: Port device team_slave_1 added [ 454.108639][ T5303] usb 1-1: USB disconnect, device number 60 [ 454.258498][ T9387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.270390][ T9387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.298491][ T9387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.320066][ T9387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.332775][ T9387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.359186][ T9387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.525120][ T9387] hsr_slave_0: entered promiscuous mode [ 454.532109][ T9387] hsr_slave_1: entered promiscuous mode [ 454.539279][ T9387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.547136][ T9387] Cannot create hsr debugfs directory [ 454.594927][ T5235] Bluetooth: hci1: command tx timeout [ 454.727983][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 455.014698][ T5303] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 455.155835][ T5235] Bluetooth: hci5: command tx timeout [ 455.161492][ T47] usb 4-1: 0:2 : does not exist [ 455.179326][ T9404] vhci_hcd: connection reset by peer [ 455.180555][ T47] usb 4-1: USB disconnect, device number 76 [ 455.185121][ T5303] usb 5-1: Using ep0 maxpacket: 16 [ 455.196599][ T1602] vhci_hcd: stop threads [ 455.200048][ T8583] udevd[8583]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.200864][ T1602] vhci_hcd: release socket [ 455.223612][ T1602] vhci_hcd: disconnect device [ 455.266162][ T5303] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 455.308235][ T5303] usb 5-1: config 128 has 0 interfaces, different from the descriptor's value: 5 [ 455.343486][ T5303] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 455.381868][ T5303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.415353][ T9463] netlink: 'syz.3.718': attribute type 8 has an invalid length. [ 455.598733][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 455.729479][ T9387] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.792758][ T9323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 455.934290][ T5285] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 455.978701][ T9387] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.027574][ T9323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 456.045188][ T9452] netlink: 'syz.4.715': attribute type 16 has an invalid length. [ 456.054612][ T9452] netlink: 'syz.4.715': attribute type 17 has an invalid length. [ 456.105861][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.138074][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.176054][ T5285] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 456.193389][ T5303] usb 5-1: string descriptor 0 read error: -71 [ 456.217169][ T5303] usb 5-1: USB disconnect, device number 70 [ 456.235110][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.268245][ T5285] usb 1-1: config 0 descriptor?? [ 456.308018][ T9387] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.345361][ T9323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 456.366089][ T9323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 456.462363][ T9387] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.681176][ T9387] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 456.699401][ T9387] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 456.727331][ T9387] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 456.760273][ T9387] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 456.860618][ T9323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.907478][ T5285] usb 1-1: language id specifier not provided by device, defaulting to English [ 456.959598][ T9323] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.001849][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.009064][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.061509][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.068700][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.174281][ T8372] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 457.212457][ T9323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.244527][ T5235] Bluetooth: hci5: command tx timeout [ 457.292314][ T9387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.318954][ T9470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.328228][ T8372] usb 5-1: Using ep0 maxpacket: 32 [ 457.365046][ T8372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.369154][ T9323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.385833][ T9470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.400797][ T8372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.429307][ T9387] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.444264][ T8372] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 457.469936][ T8372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.498731][ T8176] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.505937][ T8176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.529863][ T8372] usb 5-1: config 0 descriptor?? [ 457.552029][ T8372] hub 5-1:0.0: USB hub found [ 457.576142][ T8176] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.583302][ T8176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.752158][ T8372] hub 5-1:0.0: 1 port detected [ 457.774188][ C0] hrtimer: interrupt took 76963 ns [ 457.784366][ T8] vhci_hcd: vhci_device speed not set [ 457.795519][ T9323] veth0_vlan: entered promiscuous mode [ 457.860888][ T9323] veth1_vlan: entered promiscuous mode [ 457.983230][ T9387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.011945][ T9323] veth0_macvtap: entered promiscuous mode [ 458.050913][ T9323] veth1_macvtap: entered promiscuous mode [ 458.098641][ T9323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.124735][ T9323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.136019][ T9323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.147019][ T9323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.161246][ T9323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.184951][ T9323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.197795][ T9323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.208911][ T9323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.236985][ T9323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.288690][ T9323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.322494][ T9323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.351849][ T9323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.369765][ T9323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.388352][ T9323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.407251][ T9323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.428828][ T9323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.443280][ T8372] hub 5-1:0.0: activate --> -90 [ 458.448588][ T9323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.470170][ T9323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.540759][ T9323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.554669][ T5285] uclogic 0003:256C:006D.001F: failed retrieving string descriptor #100: -71 [ 458.572025][ T5285] uclogic 0003:256C:006D.001F: failed retrieving pen parameters: -71 [ 458.580995][ T9323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.588576][ T5285] uclogic 0003:256C:006D.001F: failed probing pen v1 parameters: -71 [ 458.600914][ T9323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.601046][ T9323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.648718][ T9499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.688599][ T5285] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 458.723611][ T5285] uclogic 0003:256C:006D.001F: probe with driver uclogic failed with error -71 [ 458.742930][ T9499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.788603][ T5285] usb 1-1: USB disconnect, device number 61 [ 458.870517][ T9387] veth0_vlan: entered promiscuous mode [ 458.925751][ T8372] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 458.926249][ T5283] usb 5-1: USB disconnect, device number 71 [ 458.943919][ T9387] veth1_vlan: entered promiscuous mode [ 459.030448][ T8176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.051373][ T8176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.117323][ T8176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.130861][ T9387] veth0_macvtap: entered promiscuous mode [ 459.152503][ T8176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.173088][ T9387] veth1_macvtap: entered promiscuous mode [ 459.214464][ T5285] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 459.238541][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.276266][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.314528][ T5235] Bluetooth: hci5: command tx timeout [ 459.324473][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.351742][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.380257][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.404189][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.405653][ T5285] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 459.425511][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.453150][ T5285] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 459.465056][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.483270][ T5285] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 459.506232][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.511107][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.553537][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.623077][ T9387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.697922][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.755498][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.768806][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.800670][ T5285] usb 1-1: string descriptor 0 read error: -22 [ 459.813577][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.858884][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.892525][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.915110][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.944788][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.964283][ T9387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.985005][ T9387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.064710][ T9387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.127424][ T9387] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.166458][ T9387] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.192301][ T9387] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.214302][ T9387] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.267372][ T47] usb 1-1: USB disconnect, device number 62 [ 460.444707][ T5285] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 460.459887][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.498819][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.582875][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.608701][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.626160][ T5285] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 460.654410][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.687531][ T5285] usb 5-1: config 0 descriptor?? [ 460.718373][ T5285] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 461.124982][ T5273] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 461.265411][ T9600] FAULT_INJECTION: forcing a failure. [ 461.265411][ T9600] name failslab, interval 1, probability 0, space 0, times 0 [ 461.286349][ T5273] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.307359][ T5273] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.319548][ T9600] CPU: 1 UID: 0 PID: 9600 Comm: syz.2.733 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 461.319580][ T9600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 461.319594][ T9600] Call Trace: [ 461.319603][ T9600] [ 461.319613][ T9600] dump_stack_lvl+0x241/0x360 [ 461.319645][ T9600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.319666][ T9600] ? __pfx__printk+0x10/0x10 [ 461.319705][ T9600] should_fail_ex+0x3b0/0x4e0 [ 461.319735][ T9600] should_failslab+0xac/0x100 [ 461.319759][ T9600] ? sctp_add_bind_addr+0x89/0x3a0 [ 461.319782][ T9600] __kmalloc_cache_noprof+0x6c/0x2c0 [ 461.319813][ T9600] sctp_add_bind_addr+0x89/0x3a0 [ 461.319840][ T9600] sctp_copy_local_addr_list+0x311/0x500 [ 461.319866][ T9600] ? sctp_copy_local_addr_list+0xab/0x500 [ 461.319890][ T9600] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 461.319914][ T9600] ? sctp_v6_is_any+0x60/0x70 [ 461.319945][ T9600] sctp_bind_addr_copy+0xad/0x3b0 [ 461.319966][ T9600] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 461.319994][ T9600] sctp_connect_new_asoc+0x2f3/0x6c0 [ 461.320022][ T9600] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 461.320046][ T9600] ? sctp_sendmsg+0xbb9/0x3520 [ 461.320073][ T9600] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 461.320096][ T9600] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 461.320120][ T9600] sctp_sendmsg+0x219a/0x3520 [ 461.320158][ T9600] ? __pfx_sctp_sendmsg+0x10/0x10 [ 461.320189][ T9600] ? __pfx_aa_sk_perm+0x10/0x10 [ 461.320215][ T9600] ? inet_sendmsg+0x330/0x390 [ 461.320246][ T9600] __sock_sendmsg+0x1a6/0x270 [ 461.320275][ T9600] __sys_sendto+0x39b/0x4f0 [ 461.320302][ T9600] ? __pfx___sys_sendto+0x10/0x10 [ 461.320320][ T9600] ? __mutex_unlock_slowpath+0x21d/0x750 [ 461.320368][ T9600] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 461.320398][ T9600] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 461.320431][ T9600] __x64_sys_sendto+0xde/0x100 [ 461.320455][ T9600] do_syscall_64+0xf3/0x230 [ 461.320476][ T9600] ? clear_bhb_loop+0x35/0x90 [ 461.320507][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.320534][ T9600] RIP: 0033:0x7fdf82f7dff9 [ 461.320553][ T9600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.320571][ T9600] RSP: 002b:00007fdf83e1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 461.320596][ T9600] RAX: ffffffffffffffda RBX: 00007fdf83135f80 RCX: 00007fdf82f7dff9 [ 461.320613][ T9600] RDX: 000000000000fee4 RSI: 0000000020847fff RDI: 0000000000000004 [ 461.320628][ T9600] RBP: 00007fdf83e1a090 R08: 000000002005ffe4 R09: 000000000000001c [ 461.320643][ T9600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.320657][ T9600] R13: 0000000000000000 R14: 00007fdf83135f80 R15: 00007fdf8325fa28 [ 461.320688][ T9600] [ 461.475628][ T5283] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 461.609406][ T5273] usb 4-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 461.658319][ T5273] usb 4-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 461.713951][ T5273] usb 4-1: config 1 interface 1 has no altsetting 0 [ 461.741219][ T5273] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 461.751233][ T5273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.782432][ T5273] usb 4-1: Product: syz [ 461.795759][ T5283] usb 2-1: Using ep0 maxpacket: 8 [ 461.797064][ T5273] usb 4-1: Manufacturer: syz [ 461.805357][ T5283] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 461.823063][ T5285] gspca_sunplus: reg_w_riv err -71 [ 461.829076][ T5285] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 461.831435][ T5273] usb 4-1: SerialNumber: syz [ 461.840147][ T5283] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 461.872665][ T5285] usb 5-1: USB disconnect, device number 72 [ 461.872851][ T5273] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 461.889551][ T5283] usb 2-1: config 135 has no interface number 0 [ 461.916501][ T5283] usb 2-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 461.954284][ T5283] usb 2-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 461.999810][ T5283] usb 2-1: config 135 interface 230 has no altsetting 0 [ 462.031231][ T5283] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 462.062247][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.082735][ T5283] usb 2-1: Product: syz [ 462.097331][ T5283] usb 2-1: Manufacturer: syz [ 462.102014][ T5283] usb 2-1: SerialNumber: syz [ 462.351575][ T5283] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 462.374552][ T5283] usb 2-1: No valid video chain found. [ 462.478171][ T5283] usb 2-1: USB disconnect, device number 76 [ 462.543647][ T9632] netlink: 40 bytes leftover after parsing attributes in process `syz.4.738'. [ 462.765244][ T5273] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 462.834763][ T8] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 462.915514][ T5304] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 462.925353][ T5273] usb 1-1: Using ep0 maxpacket: 16 [ 462.949995][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.968410][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.979121][ T5273] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 463.015872][ T5273] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 463.026937][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 463.034607][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 463.048836][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.063399][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 463.074706][ T5273] usb 1-1: config 0 descriptor?? [ 463.086570][ T5304] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 463.111145][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 5319, setting to 8 [ 463.137167][ T5304] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 463.157511][ T5304] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.160940][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 463.210159][ T5304] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 463.228683][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 463.238234][ T5304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.281587][ T5304] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 463.284224][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 463.317922][ T5304] usb 3-1: invalid MIDI out EP 0 [ 463.348742][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 5319, setting to 8 [ 463.393717][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 463.433226][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 463.454315][ T8585] udevd[8585]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.459750][ T5304] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 463.499779][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 463.515708][ T5273] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 463.523003][ T5273] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 463.574336][ T47] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 463.587366][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 5319, setting to 8 [ 463.613987][ T5273] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 463.632624][ T8] usb 5-1: string descriptor 0 read error: -22 [ 463.641377][ T5273] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 463.654491][ T8] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 463.675533][ T5273] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 463.688967][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.707149][ T5273] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 463.737221][ T8] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 463.749881][ T5273] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 463.764810][ T47] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 463.797860][ T5273] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 463.815695][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.831021][ T5273] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 463.854786][ T5273] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 463.870377][ T47] usb 2-1: config 0 descriptor?? [ 463.882005][ T5273] microsoft 0003:045E:07DA.0020: No inputs registered, leaving [ 463.893370][ T5304] usb 4-1: USB disconnect, device number 77 [ 463.905373][ T47] cp210x 2-1:0.0: cp210x converter detected [ 463.929503][ T5273] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 463.954111][ T9659] FAULT_INJECTION: forcing a failure. [ 463.954111][ T9659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.989427][ T9632] usb 5-1: Couldn't submit interrupt_out_urb -90 [ 464.001400][ T9659] CPU: 1 UID: 0 PID: 9659 Comm: syz.3.741 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 464.012046][ T9659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 464.022141][ T9659] Call Trace: [ 464.024406][ T5273] microsoft 0003:045E:07DA.0020: no inputs found [ 464.025422][ T9659] [ 464.034708][ T9659] dump_stack_lvl+0x241/0x360 [ 464.039421][ T9659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.044649][ T9659] ? __pfx__printk+0x10/0x10 [ 464.049279][ T9659] ? __pfx_lock_release+0x10/0x10 [ 464.051106][ T5273] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway [ 464.054335][ T9659] should_fail_ex+0x3b0/0x4e0 [ 464.054370][ T9659] strncpy_from_user+0x36/0x250 [ 464.054398][ T9659] getname_flags+0xf1/0x540 [ 464.054424][ T9659] io_renameat_prep+0x1b9/0x380 [ 464.054449][ T9659] io_submit_sqes+0x9bc/0x1c00 [ 464.054497][ T9659] __se_sys_io_uring_enter+0x2c3/0x2bb0 [ 464.054529][ T9659] ? ksys_write+0x229/0x2b0 [ 464.096897][ T9659] ? __pfx_lock_release+0x10/0x10 [ 464.101929][ T9659] ? vfs_write+0x7bf/0xc90 [ 464.106350][ T9659] ? kmem_cache_free+0x1a2/0x420 [ 464.111340][ T9659] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 464.117326][ T9659] ? __mutex_unlock_slowpath+0x21d/0x750 [ 464.122962][ T9659] ? __pfx_vfs_write+0x10/0x10 [ 464.127727][ T9659] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 464.133701][ T9659] ? __fget_files+0x3f3/0x470 [ 464.138413][ T9659] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 464.144397][ T9659] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 464.150727][ T9659] ? do_syscall_64+0x100/0x230 [ 464.155505][ T9659] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 464.161046][ T9659] do_syscall_64+0xf3/0x230 [ 464.165572][ T9659] ? clear_bhb_loop+0x35/0x90 [ 464.170243][ T9659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.176137][ T9659] RIP: 0033:0x7f476757dff9 [ 464.180543][ T9659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.200158][ T9659] RSP: 002b:00007f4768360038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 464.208568][ T9659] RAX: ffffffffffffffda RBX: 00007f4767735f80 RCX: 00007f476757dff9 [ 464.216536][ T9659] RDX: 0000000000000000 RSI: 0000000000007d79 RDI: 0000000000000003 [ 464.224508][ T9659] RBP: 00007f4768360090 R08: 0000000000000000 R09: 0000000000000000 [ 464.232469][ T9659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.240432][ T9659] R13: 0000000000000000 R14: 00007f4767735f80 R15: 00007f476785fa28 [ 464.248402][ T9659] [ 464.251568][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.264597][ T5273] usb 5-1: USB disconnect, device number 73 [ 464.305385][ T47] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 464.313909][ T47] cp210x 2-1:0.0: querying part number failed [ 464.331863][ T47] usb 2-1: cp210x converter now attached to ttyUSB0 [ 464.473101][ T5286] usb 1-1: USB disconnect, device number 63 [ 465.219075][ T47] usb 3-1: USB disconnect, device number 52 [ 465.414790][ T9698] FAULT_INJECTION: forcing a failure. [ 465.414790][ T9698] name failslab, interval 1, probability 0, space 0, times 0 [ 465.440563][ T9698] CPU: 0 UID: 0 PID: 9698 Comm: syz.2.749 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 465.451210][ T9698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 465.461267][ T9698] Call Trace: [ 465.464544][ T9698] [ 465.467477][ T9698] dump_stack_lvl+0x241/0x360 [ 465.472178][ T9698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.477395][ T9698] ? __pfx__printk+0x10/0x10 [ 465.482014][ T9698] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 465.488011][ T9698] ? __pfx___might_resched+0x10/0x10 [ 465.493326][ T9698] should_fail_ex+0x3b0/0x4e0 [ 465.498014][ T9698] should_failslab+0xac/0x100 [ 465.502698][ T9698] ? __alloc_skb+0x1c3/0x440 [ 465.507299][ T9698] kmem_cache_alloc_node_noprof+0x71/0x320 [ 465.513139][ T9698] __alloc_skb+0x1c3/0x440 [ 465.517558][ T9698] ? __pfx___alloc_skb+0x10/0x10 [ 465.522489][ T9698] ? netlink_autobind+0xd6/0x2f0 [ 465.527457][ T9698] ? netlink_autobind+0x2b0/0x2f0 [ 465.532485][ T9698] netlink_sendmsg+0x638/0xcb0 [ 465.537271][ T9698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.542554][ T9698] ? aa_sock_msg_perm+0x91/0x160 [ 465.547499][ T9698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.552791][ T9698] __sock_sendmsg+0x221/0x270 [ 465.557486][ T9698] ____sys_sendmsg+0x52a/0x7e0 [ 465.562255][ T9698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.567547][ T9698] __sys_sendmsg+0x292/0x380 [ 465.572140][ T9698] ? __pfx___sys_sendmsg+0x10/0x10 [ 465.577286][ T9698] ? __pfx_vfs_write+0x10/0x10 [ 465.582066][ T9698] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 465.588402][ T9698] ? do_syscall_64+0x100/0x230 [ 465.593167][ T9698] ? do_syscall_64+0xb6/0x230 [ 465.597856][ T9698] do_syscall_64+0xf3/0x230 [ 465.602367][ T9698] ? clear_bhb_loop+0x35/0x90 [ 465.607077][ T9698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.612975][ T9698] RIP: 0033:0x7fdf82f7dff9 [ 465.617397][ T9698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.637005][ T9698] RSP: 002b:00007fdf83e1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.645427][ T9698] RAX: ffffffffffffffda RBX: 00007fdf83135f80 RCX: 00007fdf82f7dff9 [ 465.653398][ T9698] RDX: 0000000000044004 RSI: 0000000020000140 RDI: 0000000000000003 [ 465.661377][ T9698] RBP: 00007fdf83e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 465.669353][ T9698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.677345][ T9698] R13: 0000000000000000 R14: 00007fdf83135f80 R15: 00007fdf8325fa28 [ 465.685342][ T9698] [ 466.224289][ T47] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 466.417347][ T5304] usb 2-1: USB disconnect, device number 77 [ 466.425775][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 466.447040][ T5304] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 466.460815][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.487874][ T47] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 466.497339][ T5304] cp210x 2-1:0.0: device disconnected [ 466.523354][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.554746][ T9726] netlink: 'syz.1.756': attribute type 29 has an invalid length. [ 466.566457][ T47] usb 5-1: config 0 descriptor?? [ 466.619793][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'. [ 466.790672][ T9709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.919231][ T9709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.936197][ T5283] usb 5-1: USB disconnect, device number 74 [ 466.996191][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.751'. [ 467.094625][ T5304] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 467.262567][ T9746] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 467.272538][ T5304] usb 2-1: Using ep0 maxpacket: 16 [ 467.287574][ T5304] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 467.309096][ T5304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.328012][ T5304] usb 2-1: Product: syz [ 467.335642][ T5304] usb 2-1: Manufacturer: syz [ 467.348543][ T5304] usb 2-1: SerialNumber: syz [ 467.385557][ T5304] usb 2-1: config 0 descriptor?? [ 467.454378][ T5286] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 467.583857][ T8583] udevd[8583]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.620667][ T9732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.637093][ T9732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.665644][ T9732] random: crng reseeded on system resumption [ 467.754305][ T5286] usb 4-1: Using ep0 maxpacket: 8 [ 467.766254][ T5286] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 467.783813][ T5286] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 467.793313][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.819826][ T5286] usb 4-1: Product: syz [ 467.826431][ T5286] usb 4-1: Manufacturer: syz [ 467.831151][ T5286] usb 4-1: SerialNumber: syz [ 467.839986][ T5286] usb 4-1: config 0 descriptor?? [ 467.858606][ T5286] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 468.564435][ T5286] gspca_zc3xx: reg_w_i err -110 [ 468.627559][ T5283] usb 2-1: USB disconnect, device number 78 [ 468.814791][ T5304] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 468.956460][ T9744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.977388][ T5304] usb 3-1: Using ep0 maxpacket: 32 [ 468.994004][ T9744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.038628][ T5304] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 469.062098][ T5304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.090913][ T5304] usb 3-1: Product: syz [ 469.098989][ T5304] usb 3-1: Manufacturer: syz [ 469.113386][ T5304] usb 3-1: SerialNumber: syz [ 469.129479][ T5304] usb 3-1: config 0 descriptor?? [ 469.174235][ T5286] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 469.182326][ T9768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.203775][ T5286] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 469.397679][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.771'. [ 469.422923][ T9748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.452956][ T9780] misc userio: Begin command sent, but we're already running [ 469.458281][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.771'. [ 469.520824][ T9748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.751378][ T5304] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 469.764366][ T5304] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 469.835645][ T5304] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 469.861061][ T5304] usb 3-1: USB disconnect, device number 53 [ 470.191520][ T5304] usb 4-1: USB disconnect, device number 78 [ 470.404350][ T5286] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 470.586371][ T5286] usb 2-1: Using ep0 maxpacket: 32 [ 470.596151][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 470.616985][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 470.662614][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 470.674593][ T5304] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 470.727642][ T5286] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 470.762326][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 470.802588][ T5286] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 470.831845][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 470.846974][ T5304] usb 4-1: Using ep0 maxpacket: 8 [ 470.867248][ T5304] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 470.896289][ T5304] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 470.903310][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 470.912111][ T5304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.969982][ T5286] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 470.973375][ T5304] usb 4-1: Product: syz [ 470.983875][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.983904][ T5286] usb 2-1: Product: syz [ 470.983919][ T5286] usb 2-1: Manufacturer: syz [ 470.983936][ T5286] usb 2-1: SerialNumber: syz [ 471.022701][ T5304] usb 4-1: Manufacturer: syz [ 471.045155][ T5286] usb 2-1: config 0 descriptor?? [ 471.050978][ T9795] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 471.066482][ T5304] usb 4-1: SerialNumber: syz [ 471.116053][ T5304] usb 4-1: config 0 descriptor?? [ 471.132304][ T5304] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 471.205506][ T9813] binder: 9806:9813 ioctl c0306201 20000080 returned -14 [ 471.270897][ T5286] cxacru 2-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 471.326510][ T5286] usb 2-1: USB disconnect, device number 79 [ 471.328317][ T9818] cxacru 2-1:0.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 471.348176][ T9818] cxacru 2-1:0.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 471.527370][ T5273] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 471.694214][ T5273] usb 1-1: Using ep0 maxpacket: 8 [ 471.715019][ T5273] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 471.743671][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.780677][ T5273] usb 1-1: config 0 descriptor?? [ 471.801691][ T5273] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 471.844566][ T5304] gspca_zc3xx: reg_w_i err -110 [ 472.016869][ T5273] dvb-usb: bulk message failed: -22 (1/0) [ 472.095220][ T5273] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 472.150811][ T5273] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 472.153598][ T5235] Bluetooth: hci1: unexpected event 0x1c length: 96 > 5 [ 472.164315][ T5273] usb 1-1: media controller created [ 472.189894][ T5273] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.279162][ T9811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.313634][ T9821] batadv0: entered promiscuous mode [ 472.316069][ T9825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.321292][ T9811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.353848][ T9821] macvlan1: entered promiscuous mode [ 472.372853][ T9825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.426435][ T5273] DVB: Unable to find symbol lgdt330x_attach() [ 472.432702][ T5273] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 472.434634][ T5304] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 472.449336][ T5273] dvb-usb: bulk message failed: -22 (1/0) [ 472.457781][ T5273] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 472.464370][ T5304] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 472.518199][ T5273] usb 1-1: USB disconnect, device number 65 [ 472.543577][ T9828] binder: 9827:9828 unknown command 0 [ 472.572601][ T9828] binder: 9827:9828 ioctl c0306201 20000880 returned -22 [ 472.613581][ T5273] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 473.246510][ T5273] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 473.299738][ T9840] FAULT_INJECTION: forcing a failure. [ 473.299738][ T9840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.313737][ T9840] CPU: 0 UID: 0 PID: 9840 Comm: syz.1.788 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 473.324359][ T9840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 473.334440][ T9840] Call Trace: [ 473.337728][ T9840] [ 473.340660][ T9840] dump_stack_lvl+0x241/0x360 [ 473.345344][ T9840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.350544][ T9840] ? __pfx__printk+0x10/0x10 [ 473.355145][ T9840] should_fail_ex+0x3b0/0x4e0 [ 473.359833][ T9840] _copy_from_user+0x2f/0xe0 [ 473.364436][ T9840] move_addr_to_kernel+0x82/0x150 [ 473.369470][ T9840] __sys_bind+0x162/0x2d0 [ 473.373814][ T9840] ? __pfx___sys_bind+0x10/0x10 [ 473.378678][ T9840] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 473.385009][ T9840] ? do_syscall_64+0x100/0x230 [ 473.389774][ T9840] __x64_sys_bind+0x7a/0x90 [ 473.394285][ T9840] do_syscall_64+0xf3/0x230 [ 473.398791][ T9840] ? clear_bhb_loop+0x35/0x90 [ 473.403468][ T9840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.409365][ T9840] RIP: 0033:0x7f8be5f7dff9 [ 473.413793][ T9840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.433418][ T9840] RSP: 002b:00007f8be6cce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 473.441846][ T9840] RAX: ffffffffffffffda RBX: 00007f8be6135f80 RCX: 00007f8be5f7dff9 [ 473.449824][ T9840] RDX: 0000000000000057 RSI: 0000000020000340 RDI: 0000000000000003 [ 473.457796][ T9840] RBP: 00007f8be6cce090 R08: 0000000000000000 R09: 0000000000000000 [ 473.465768][ T9840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.473735][ T9840] R13: 0000000000000000 R14: 00007f8be6135f80 R15: 00007f8be625fa28 [ 473.481739][ T9840] [ 473.584264][ T5273] usb 3-1: Using ep0 maxpacket: 8 [ 473.602955][ T5273] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 473.634372][ T8] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 473.648168][ T5273] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 473.678111][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.687325][ T5273] usb 3-1: Product: syz [ 473.691547][ T5273] usb 3-1: Manufacturer: syz [ 473.705197][ T5273] usb 3-1: SerialNumber: syz [ 473.711819][ T5273] usb 3-1: config 0 descriptor?? [ 473.722128][ T5273] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 473.794557][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 473.806544][ T8] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 473.816279][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.834248][ T8] usb 1-1: Product: syz [ 473.838663][ T8] usb 1-1: Manufacturer: syz [ 473.843305][ T8] usb 1-1: SerialNumber: syz [ 473.862704][ T8] usb 1-1: config 0 descriptor?? [ 473.872100][ T8] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 474.134388][ T8] ssu100 1-1:0.0: probe with driver ssu100 failed with error -5 [ 474.284115][ T47] usb 4-1: USB disconnect, device number 79 [ 474.454260][ T5273] gspca_zc3xx: reg_w_i err -110 [ 474.846740][ T8176] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.044225][ T5273] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 475.076800][ T9835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.095523][ T5273] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 475.200012][ T9835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.356568][ T8176] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.505087][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 475.515586][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 475.523866][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 475.533697][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 475.541533][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 475.549220][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 475.710799][ T8176] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.200057][ T8176] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.434899][ T47] usb 1-1: USB disconnect, device number 66 [ 476.498570][ T9875] FAULT_INJECTION: forcing a failure. [ 476.498570][ T9875] name failslab, interval 1, probability 0, space 0, times 0 [ 476.530824][ T9875] CPU: 1 UID: 0 PID: 9875 Comm: syz.0.802 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 476.541456][ T9875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 476.551519][ T9875] Call Trace: [ 476.554805][ T9875] [ 476.557729][ T9875] dump_stack_lvl+0x241/0x360 [ 476.562402][ T9875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.567586][ T9875] ? __pfx__printk+0x10/0x10 [ 476.572167][ T9875] ? ref_tracker_alloc+0x332/0x490 [ 476.577273][ T9875] should_fail_ex+0x3b0/0x4e0 [ 476.581943][ T9875] ? skb_clone+0x20c/0x390 [ 476.586348][ T9875] should_failslab+0xac/0x100 [ 476.591016][ T9875] ? skb_clone+0x20c/0x390 [ 476.595424][ T9875] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 476.600787][ T9875] skb_clone+0x20c/0x390 [ 476.605037][ T9875] __netlink_deliver_tap+0x3cc/0x7c0 [ 476.610314][ T9875] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.615527][ T9875] netlink_deliver_tap+0x19d/0x1b0 [ 476.620639][ T9875] netlink_unicast+0x7c4/0x990 [ 476.625423][ T9875] ? __pfx_netlink_unicast+0x10/0x10 [ 476.630698][ T9875] ? __virt_addr_valid+0x183/0x530 [ 476.635802][ T9875] ? __check_object_size+0x48e/0x900 [ 476.641092][ T9875] netlink_sendmsg+0x8e4/0xcb0 [ 476.645849][ T9875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.651121][ T9875] ? aa_sock_msg_perm+0x91/0x160 [ 476.656069][ T9875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.661336][ T9875] __sock_sendmsg+0x221/0x270 [ 476.666003][ T9875] ____sys_sendmsg+0x52a/0x7e0 [ 476.670759][ T9875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.676037][ T9875] __sys_sendmsg+0x292/0x380 [ 476.680637][ T9875] ? __pfx___sys_sendmsg+0x10/0x10 [ 476.685768][ T9875] ? __pfx_vfs_write+0x10/0x10 [ 476.690547][ T9875] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 476.696878][ T9875] ? do_syscall_64+0x100/0x230 [ 476.701639][ T9875] ? do_syscall_64+0xb6/0x230 [ 476.706306][ T9875] do_syscall_64+0xf3/0x230 [ 476.710825][ T9875] ? clear_bhb_loop+0x35/0x90 [ 476.715507][ T9875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.721424][ T9875] RIP: 0033:0x7f2bb597dff9 [ 476.725829][ T9875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.745446][ T9875] RSP: 002b:00007f2bb67ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.753869][ T9875] RAX: ffffffffffffffda RBX: 00007f2bb5b35f80 RCX: 00007f2bb597dff9 [ 476.761831][ T9875] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 476.769880][ T9875] RBP: 00007f2bb67ec090 R08: 0000000000000000 R09: 0000000000000000 [ 476.777843][ T9875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.785810][ T9875] R13: 0000000000000000 R14: 00007f2bb5b35f80 R15: 00007f2bb5c5fa28 [ 476.793783][ T9875] [ 476.796822][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.984318][ T5283] usb 3-1: USB disconnect, device number 54 [ 477.126983][ T9868] chnl_net:caif_netlink_parms(): no params data found [ 477.624339][ T5283] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 477.642550][ T5232] Bluetooth: hci3: command tx timeout [ 477.764367][ T8176] bridge_slave_1: left allmulticast mode [ 477.770086][ T8176] bridge_slave_1: left promiscuous mode [ 477.776502][ T8176] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.818169][ T8176] bridge_slave_0: left allmulticast mode [ 477.856161][ T5283] usb 1-1: Using ep0 maxpacket: 8 [ 477.874701][ T5283] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 477.875884][ T8176] bridge_slave_0: left promiscuous mode [ 477.896111][ T5283] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 477.915743][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.932485][ T8176] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.939885][ T5283] usb 1-1: Product: syz [ 477.959429][ T5283] usb 1-1: Manufacturer: syz [ 477.974318][ T5283] usb 1-1: SerialNumber: syz [ 477.985540][ T5283] usb 1-1: config 0 descriptor?? [ 478.016005][ T5283] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 478.724525][ T5283] gspca_zc3xx: reg_w_i err -110 [ 478.874355][ T5284] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 479.140494][ T8176] batman_adv: batadv0: Removing interface: geneve0 [ 479.174767][ T5304] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 479.292289][ T5284] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 479.314341][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.324298][ T5283] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 479.330634][ T5283] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 479.367780][ T5284] usb 3-1: Product: syz [ 479.372021][ T5284] usb 3-1: Manufacturer: syz [ 479.389301][ T5284] usb 3-1: SerialNumber: syz [ 479.411396][ T5284] usb 3-1: config 0 descriptor?? [ 479.445212][ T5304] usb 4-1: config 53 has an invalid descriptor of length 154, skipping remainder of the config [ 479.455709][ T5304] usb 4-1: config 53 has 0 interfaces, different from the descriptor's value: 15 [ 479.493321][ T5304] usb 4-1: language id specifier not provided by device, defaulting to English [ 479.523146][ T5304] usb 4-1: New USB device found, idVendor=12d1, idProduct=c187, bcdDevice=2b.99 [ 479.539729][ T9883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.559261][ T9883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.580006][ T5304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.604227][ T5304] usb 4-1: Product: syz [ 479.608568][ T5304] usb 4-1: SerialNumber: syz [ 479.631359][ T5284] hso 3-1:0.0: Failed to find BULK IN ep [ 479.657235][ T5284] usb-storage 3-1:0.0: USB Mass Storage device detected [ 479.720282][ T5232] Bluetooth: hci3: command tx timeout [ 480.069016][ T8176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.116067][ T8176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.145593][ T8176] bond0 (unregistering): Released all slaves [ 480.271080][ T5273] usb 3-1: USB disconnect, device number 55 [ 480.282817][ T9868] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.343494][ T9868] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.386420][ T9868] bridge_slave_0: entered allmulticast mode [ 480.424316][ T9868] bridge_slave_0: entered promiscuous mode [ 480.541897][ T5304] usb 4-1: USB disconnect, device number 80 [ 480.601472][ T9868] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.628008][ T9868] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.652017][ T9868] bridge_slave_1: entered allmulticast mode [ 480.673046][ T9868] bridge_slave_1: entered promiscuous mode [ 480.779146][ T9868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.801551][ T9868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.899178][ T9868] team0: Port device team_slave_0 added [ 480.943322][ T8176] batadv0: left promiscuous mode [ 480.957039][ T8176] macvlan1: left promiscuous mode [ 480.984052][ T8176] hsr_slave_0: left promiscuous mode [ 481.024441][ T8176] hsr_slave_1: left promiscuous mode [ 481.043860][ T8176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.054770][ T9922] fuse: Bad value for 'fd' [ 481.065925][ T8176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.115159][ T8176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.144594][ T8176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.231197][ T8176] veth1_macvtap: left promiscuous mode [ 481.243520][ T8176] veth0_macvtap: left promiscuous mode [ 481.258122][ T8176] veth1_vlan: left promiscuous mode [ 481.271313][ T8176] veth0_vlan: left promiscuous mode [ 481.397658][ T5304] usb 1-1: USB disconnect, device number 67 [ 481.514368][ T5284] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 481.707582][ T5284] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 481.733306][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.768821][ T5284] usb 4-1: config 0 descriptor?? [ 481.795071][ T5232] Bluetooth: hci3: command tx timeout [ 481.994321][ T5284] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 482.002902][ T5284] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 482.060323][ T5284] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 482.091926][ T5284] [drm] Initialized udl on minor 2 [ 482.264499][ T5284] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 482.293012][ T5284] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 482.600720][ T5283] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 482.610262][ T5283] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 482.618660][ T5304] usb 4-1: USB disconnect, device number 81 [ 482.952706][ T8176] team0 (unregistering): Port device team_slave_1 removed [ 483.047083][ T8176] team0 (unregistering): Port device team_slave_0 removed [ 483.874308][ T5232] Bluetooth: hci3: command tx timeout [ 483.937281][ T9868] team0: Port device team_slave_1 added [ 483.964656][ T9922] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 484.156718][ T9868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.176767][ T9868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.227543][ T9868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.246096][ T9868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.256523][ T9868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.311556][ T9868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.421631][ T9868] hsr_slave_0: entered promiscuous mode [ 484.445717][ T9868] hsr_slave_1: entered promiscuous mode [ 484.458888][ T9868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.473904][ T9868] Cannot create hsr debugfs directory [ 484.655084][ T5273] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 484.781129][ T9972] program syz.0.820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.874365][ T8372] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 484.921751][ T5273] usb 3-1: config index 0 descriptor too short (expected 61202, got 18) [ 484.936193][ T5273] usb 3-1: config 0 has an invalid interface number: 124 but max is 0 [ 484.945229][ T5273] usb 3-1: config 0 has no interface number 0 [ 484.957370][ T5273] usb 3-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=30.00 [ 484.971200][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.980256][ T5273] usb 3-1: Product: syz [ 484.984927][ T5273] usb 3-1: Manufacturer: syz [ 484.989557][ T5273] usb 3-1: SerialNumber: syz [ 485.053931][ T5273] usb 3-1: config 0 descriptor?? [ 485.059107][ T8372] usb 4-1: Using ep0 maxpacket: 8 [ 485.077854][ T8372] usb 4-1: config index 0 descriptor too short (expected 22352, got 36) [ 485.097179][ T8372] usb 4-1: config 66 has too many interfaces: 82, using maximum allowed: 32 [ 485.115906][ T8372] usb 4-1: config 66 has an invalid descriptor of length 117, skipping remainder of the config [ 485.144331][ T8372] usb 4-1: config 66 has 0 interfaces, different from the descriptor's value: 82 [ 485.153590][ T8372] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 485.184601][ T8372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.268432][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 485.292915][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.304421][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 485.361897][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.446838][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.505276][ T9987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.506487][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.557211][ T9987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.595605][ T5273] ftdi_sio 3-1:0.124: FTDI USB Serial Device converter detected [ 485.621173][ T8372] usb 4-1: string descriptor 0 read error: -71 [ 485.640489][ T5273] usb 3-1: Detected FT2232HP [ 485.665845][ T8372] usb 4-1: USB disconnect, device number 82 [ 485.679489][ T5273] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 485.715800][ T5273] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 485.741949][ T5273] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 485.764260][ T5283] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 485.787163][ T5273] usb 3-1: USB disconnect, device number 56 [ 485.811275][ T5273] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 485.836545][ T5273] ftdi_sio 3-1:0.124: device disconnected [ 485.851782][ T9868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 485.888545][ T9868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 485.925879][ T5283] usb 1-1: Using ep0 maxpacket: 8 [ 485.933789][ T9868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 485.933972][ T5283] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 485.957673][ T5283] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 485.967465][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.976216][ T5283] usb 1-1: Product: syz [ 485.978762][ T9868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 485.984592][ T5283] usb 1-1: Manufacturer: syz [ 486.000848][ T5283] usb 1-1: SerialNumber: syz [ 486.007970][ T5283] usb 1-1: config 0 descriptor?? [ 486.036480][ T5283] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 486.202369][ T9868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.265782][ T9868] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.305322][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.312468][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.376305][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.383453][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.476520][ T9868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.494686][ T5304] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 486.580578][ T9868] veth0_vlan: entered promiscuous mode [ 486.620951][ T9868] veth1_vlan: entered promiscuous mode [ 486.694485][ T5304] usb 4-1: Using ep0 maxpacket: 32 [ 486.713367][ T5304] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 486.724645][ T5283] gspca_zc3xx: reg_w_i err -110 [ 486.749054][ T9868] veth0_macvtap: entered promiscuous mode [ 486.772454][ T9868] veth1_macvtap: entered promiscuous mode [ 486.783289][ T5304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.801853][ T5304] usb 4-1: Product: syz [ 486.813065][ T5304] usb 4-1: Manufacturer: syz [ 486.828330][ T5304] usb 4-1: SerialNumber: syz [ 486.842853][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.862960][ T5304] usb 4-1: config 0 descriptor?? [ 486.868156][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.882654][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.897968][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.930559][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.998178][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.023724][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.034602][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.044615][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.056323][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.067880][ T9868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.100323][T10012] warning: `syz.2.826' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 487.150303][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.171994][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.190507][T10019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.196802][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.241210][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.263225][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.292007][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.335923][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.349097][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.359707][ T5283] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 487.373489][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.385631][ T5283] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 487.414555][ T9868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.469245][ T9868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.511870][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.528775][ T9868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.553756][T10019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.594366][ T5304] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 487.602694][ T5304] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 487.608879][ T9868] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.630296][ T9868] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.664711][ T9868] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.688993][ T9868] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.717155][T10029] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 487.754116][T10029] input: syz1 as /devices/virtual/input/input40 [ 487.769274][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.827'. [ 487.779524][T10026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.827'. [ 487.879429][ T5304] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 487.913065][ T5304] usb 4-1: USB disconnect, device number 83 [ 487.924332][ T8176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.932214][ T8176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.085815][ T8176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.094302][ T5284] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 488.107105][ T8176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.276042][ T5284] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 82, using maximum allowed: 30 [ 488.305219][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.352433][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.386880][ T5284] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 82 [ 488.404496][ T5284] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 488.413596][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.455770][ T5284] usb 3-1: config 0 descriptor?? [ 488.604272][ T25] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 488.744358][ T25] usb 5-1: device descriptor read/64, error -71 [ 488.897197][ T8] usb 1-1: USB disconnect, device number 68 [ 488.996179][ T25] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 489.124374][ T5304] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 489.154405][ T25] usb 5-1: device descriptor read/64, error -71 [ 489.264902][ T25] usb usb5-port1: attempt power cycle [ 489.265092][ T8] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 489.278380][ T5304] usb 4-1: Using ep0 maxpacket: 8 [ 489.286796][ T5304] usb 4-1: config index 0 descriptor too short (expected 22352, got 36) [ 489.307776][ T5304] usb 4-1: config 66 has too many interfaces: 82, using maximum allowed: 32 [ 489.338573][ T5304] usb 4-1: config 66 has an invalid descriptor of length 117, skipping remainder of the config [ 489.377571][ T5304] usb 4-1: config 66 has 0 interfaces, different from the descriptor's value: 82 [ 489.396161][ T5304] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 489.412007][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.476835][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 489.496084][ T8] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 489.517432][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.539425][ T8] usb 1-1: Product: syz [ 489.543860][ T8] usb 1-1: Manufacturer: syz [ 489.552167][ T8] usb 1-1: SerialNumber: syz [ 489.592637][ T8] usb 1-1: config 0 descriptor?? [ 489.610072][ T8] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 489.614358][ T25] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 489.655619][ T5304] usb 4-1: string descriptor 0 read error: -71 [ 489.685003][ T25] usb 5-1: device descriptor read/8, error -71 [ 489.692117][ T5304] usb 4-1: USB disconnect, device number 84 [ 489.823381][ T8] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 489.836695][ T8] usb 1-1: USB disconnect, device number 69 [ 489.924303][ T25] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 489.959856][ T25] usb 5-1: device descriptor read/8, error -71 [ 490.074645][ T25] usb usb5-port1: unable to enumerate USB device [ 490.942371][ T5284] uclogic 0003:256C:006D.0021: failed retrieving Huion firmware version: -71 [ 490.970146][ T5284] uclogic 0003:256C:006D.0021: failed probing parameters: -71 [ 491.060517][ T5284] uclogic 0003:256C:006D.0021: probe with driver uclogic failed with error -71 [ 491.231487][ T5284] usb 3-1: USB disconnect, device number 57 [ 491.554685][ T937] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 491.726635][ T937] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.752441][ T937] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 491.836472][ T937] usb 1-1: config 1 has no interface number 0 [ 492.145636][ T937] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.782539][ T937] usb 1-1: config 1 interface 1 has no altsetting 1 [ 493.784421][ T5304] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 494.184386][ T5304] usb 3-1: Using ep0 maxpacket: 16 [ 494.323607][ T5304] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 494.365622][ T5304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.455698][ T5304] usb 3-1: Product: syz [ 494.474268][ T5304] usb 3-1: Manufacturer: syz [ 494.478916][ T5304] usb 3-1: SerialNumber: syz [ 494.726480][ T5304] usb 3-1: config 0 descriptor?? [ 494.918540][ T5304] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 496.694802][ T5304] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 497.768583][ T5304] usb 3-1: USB disconnect, device number 58 [ 498.606286][T10141] ebt_among: dst integrity fail: 200 [ 498.704258][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.853'. [ 501.638584][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.638851][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.727315][T10163] fuse: Bad value for 'user_id' [ 505.600899][T10163] fuse: Bad value for 'user_id' [ 506.370212][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 506.380819][ T5235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 506.393987][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 506.402990][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 506.414398][ T5235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 506.423846][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 506.750990][ T5284] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 507.494231][ T5284] usb 5-1: Using ep0 maxpacket: 16 [ 507.511878][ T5284] usb 5-1: unable to get BOS descriptor or descriptor too short [ 507.541073][ T5284] usb 5-1: config 7 has an invalid interface number: 79 but max is 0 [ 507.570941][ T5284] usb 5-1: config 7 has no interface number 0 [ 507.595072][ T5284] usb 5-1: config 7 interface 79 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 507.646960][ T5284] usb 5-1: config 7 interface 79 altsetting 6 endpoint 0x7 has an invalid bInterval 64, changing to 10 [ 507.692390][ T5284] usb 5-1: config 7 interface 79 has no altsetting 0 [ 507.731800][ T5284] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f4.98 [ 507.764367][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.772424][ T5284] usb 5-1: Product: syz [ 507.814305][ T5284] usb 5-1: Manufacturer: syz [ 507.818958][ T5284] usb 5-1: SerialNumber: syz [ 508.094585][ T5284] usb 5-1: USB disconnect, device number 79 [ 508.514903][ T5235] Bluetooth: hci6: command tx timeout [ 508.888477][ T5232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 508.899070][ T5232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 508.910372][ T5232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 508.918866][ T5232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 508.930569][ T5232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 508.941520][ T5232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 509.239865][ T25] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 509.400590][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 509.433016][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 509.485833][ T25] usb 5-1: config 3 has an invalid descriptor of length 163, skipping remainder of the config [ 509.544348][ T25] usb 5-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 509.616262][ T25] usb 5-1: New USB device found, idVendor=0509, idProduct=0812, bcdDevice=91.28 [ 509.637998][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.686757][ T25] usb 5-1: Product: syz [ 509.690981][ T25] usb 5-1: Manufacturer: syz [ 509.724726][ T25] usb 5-1: SerialNumber: syz [ 509.976316][ T25] usb 5-1: USB disconnect, device number 80 [ 510.403835][ T5235] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 510.414663][ T5235] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 510.423158][ T5235] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 510.431377][ T5235] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 510.445330][ T5235] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 510.473859][ T5235] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 510.594617][ T5235] Bluetooth: hci6: command tx timeout [ 510.974435][ T5284] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 510.994429][ T5235] Bluetooth: hci7: command tx timeout [ 511.156418][ T5284] usb 5-1: unable to get BOS descriptor or descriptor too short [ 511.194459][ T5284] usb 5-1: not running at top speed; connect to a high speed hub [ 511.210618][ T5284] usb 5-1: config 2 has an invalid interface number: 212 but max is 1 [ 511.237727][ T5284] usb 5-1: config 2 has an invalid interface number: 226 but max is 1 [ 511.274492][ T5284] usb 5-1: config 2 has no interface number 0 [ 511.295196][ T5284] usb 5-1: config 2 has no interface number 1 [ 511.302922][ T5284] usb 5-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 511.375416][ T5284] usb 5-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 511.422187][ T5284] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 511.466015][ T5284] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 511.524290][ T5284] usb 5-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 511.575772][ T5284] usb 5-1: config 2 interface 212 has no altsetting 0 [ 511.617833][ T5284] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 511.644335][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.673699][ T5284] usb 5-1: Product: syz [ 511.694001][ T5284] usb 5-1: Manufacturer: syz [ 511.724213][ T5284] usb 5-1: SerialNumber: syz [ 511.976939][ T5284] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.226/input/input41 [ 512.045184][ T5284] usb 5-1: USB disconnect, device number 81 [ 512.045240][ C1] xpad 5-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19 [ 512.594424][ T5235] Bluetooth: hci8: command tx timeout [ 512.613452][T10148] syz.3.856: vmalloc error: size 3584000, failed to allocated page array size 7000, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 512.676725][ T5235] Bluetooth: hci6: command tx timeout [ 512.725449][T10148] CPU: 1 UID: 0 PID: 10148 Comm: syz.3.856 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 512.736242][T10148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 512.746334][T10148] Call Trace: [ 512.749643][T10148] [ 512.752595][T10148] dump_stack_lvl+0x241/0x360 [ 512.757305][T10148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.762532][T10148] ? __pfx__printk+0x10/0x10 [ 512.767162][T10148] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 512.773607][T10148] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 512.780150][T10148] warn_alloc+0x278/0x410 [ 512.784516][T10148] ? __pfx_warn_alloc+0x10/0x10 [ 512.789398][T10148] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 512.795589][T10148] ? __get_vm_area_node+0x23d/0x270 [ 512.800827][T10148] __vmalloc_node_range_noprof+0x691/0x13f0 [ 512.806771][T10148] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 512.812961][T10148] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 512.819321][T10148] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 512.825506][T10148] ? __get_vm_area_node+0x23d/0x270 [ 512.830753][T10148] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 512.836674][T10148] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 512.842856][T10148] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 512.848627][T10148] ? rcu_is_watching+0x15/0xb0 [ 512.853420][T10148] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 512.859776][T10148] ? rcu_is_watching+0x15/0xb0 [ 512.864575][T10148] ? trace_kmalloc+0x1f/0xd0 [ 512.869191][T10148] ? __kmalloc_node_noprof+0x247/0x440 [ 512.874678][T10148] ? __kvmalloc_node_noprof+0x72/0x190 [ 512.880162][T10148] __kvmalloc_node_noprof+0x142/0x190 [ 512.885562][T10148] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 512.891746][T10148] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 512.897757][T10148] ? tpg_update_mv_step+0x361/0x4f0 [ 512.902994][T10148] vivid_update_format_cap+0x133c/0x2090 [ 512.908676][T10148] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 512.914700][T10148] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 512.920560][T10148] __video_do_ioctl+0xc23/0xdd0 [ 512.925455][T10148] ? __pfx___video_do_ioctl+0x10/0x10 [ 512.930865][T10148] ? __might_fault+0xc6/0x120 [ 512.935577][T10148] video_usercopy+0x89b/0x1180 [ 512.940388][T10148] ? __pfx___video_do_ioctl+0x10/0x10 [ 512.945792][T10148] ? __pfx_video_usercopy+0x10/0x10 [ 512.951037][T10148] ? __fget_files+0x29/0x470 [ 512.955654][T10148] ? __fget_files+0x3f3/0x470 [ 512.960367][T10148] v4l2_ioctl+0x189/0x1e0 [ 512.964725][T10148] ? __pfx_v4l2_ioctl+0x10/0x10 [ 512.969607][T10148] __se_sys_ioctl+0xf9/0x170 [ 512.974231][T10148] do_syscall_64+0xf3/0x230 [ 512.978761][T10148] ? clear_bhb_loop+0x35/0x90 [ 512.983461][T10148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.989387][T10148] RIP: 0033:0x7f476757dff9 [ 512.993828][T10148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.013466][T10148] RSP: 002b:00007f4768360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.021921][T10148] RAX: ffffffffffffffda RBX: 00007f4767735f80 RCX: 00007f476757dff9 [ 513.029920][T10148] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 513.037919][T10148] RBP: 00007f47675f0296 R08: 0000000000000000 R09: 0000000000000000 [ 513.045916][T10148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.053911][T10148] R13: 0000000000000000 R14: 00007f4767735f80 R15: 00007f476785fa28 [ 513.061924][T10148] [ 513.224377][ T5235] Bluetooth: hci7: command tx timeout [ 513.781378][ T5284] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 513.859334][ T5235] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 513.875189][ T5235] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 513.885995][ T5235] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 513.914949][ T5235] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 513.922618][ T5235] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 513.930944][ T5235] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 513.956052][ T5284] usb 5-1: Using ep0 maxpacket: 32 [ 513.984604][ T5284] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.031191][ T5284] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.054336][T10148] Mem-Info: [ 514.057524][T10148] active_anon:5990 inactive_anon:0 isolated_anon:0 [ 514.057524][T10148] active_file:22515 inactive_file:36331 isolated_file:0 [ 514.057524][T10148] unevictable:768 dirty:110 writeback:0 [ 514.057524][T10148] slab_reclaimable:8131 slab_unreclaimable:164964 [ 514.057524][T10148] mapped:41759 shmem:1272 pagetables:938 [ 514.057524][T10148] sec_pagetables:0 bounce:0 [ 514.057524][T10148] kernel_misc_reclaimable:0 [ 514.057524][T10148] free:1170716 free_pcp:1601 free_cma:0 [ 514.152512][ T5284] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 514.172083][ T5284] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 514.191905][ T5284] usb 5-1: Product: syz [ 514.206859][ T5284] usb 5-1: Manufacturer: syz [ 514.233747][ T5284] hub 5-1:4.0: USB hub found [ 514.264667][T10148] Node 0 active_anon:23960kB inactive_anon:0kB active_file:90060kB inactive_file:145316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:167036kB dirty:436kB writeback:0kB shmem:3552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10800kB pagetables:3752kB sec_pagetables:0kB all_unreclaimable? no [ 514.371905][T10148] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 514.445428][ T5284] hub 5-1:4.0: 2 ports detected [ 514.490834][T10148] Node 0 DMA free:15232kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:72kB local_pcp:72kB free_cma:0kB [ 514.580119][T10148] lowmem_reserve[]: 0 2465 2466 0 0 [ 514.602529][T10148] Node 0 DMA32 free:740164kB boost:64656kB min:98856kB low:107404kB high:115952kB reserved_highatomic:2048KB active_anon:24020kB inactive_anon:0kB active_file:89280kB inactive_file:145316kB unevictable:1536kB writepending:432kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:4436kB local_pcp:456kB free_cma:0kB [ 514.680017][ T5235] Bluetooth: hci8: command tx timeout [ 514.722638][T10148] lowmem_reserve[]: 0 0 0 0 0 [ 514.743135][T10148] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:780kB inactive_file:0kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 514.781145][ T5235] Bluetooth: hci6: command tx timeout [ 514.834360][T10148] lowmem_reserve[]: 0 0 0 0 0 [ 514.839244][T10148] Node 1 Normal free:3925936kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:6144KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:328kB local_pcp:0kB free_cma:0kB [ 514.957063][T10148] lowmem_reserve[]: 0 0 0 0 0 [ 514.961933][T10148] Node 0 DMA: 6*4kB (U) 5*8kB (U) 6*16kB (U) 5*32kB (U) 5*64kB (U) 6*128kB (U) 6*256kB (U) 4*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 15232kB [ 515.029810][T10148] Node 0 DMA32: 504*4kB (UMH) 641*8kB (UMEH) 492*16kB (MEH) 311*32kB (UMEH) 153*64kB (UMEH) 88*128kB (UMEH) 34*256kB (UM) 10*512kB (UM) 103*1024kB (UM) 109*2048kB (UM) 86*4096kB (UM) = 740808kB [ 515.107976][T10148] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 515.151537][T10148] Node 1 Normal: 330*4kB (UME) 185*8kB (UME) 192*16kB (UME) 326*32kB (UME) 246*64kB (UME) 181*128kB (UME) 168*256kB (UME) 146*512kB (UME) 129*1024kB (UME) 124*2048kB (UMEH) 822*4096kB (UM) = 3925936kB [ 515.214360][T10148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 515.235051][ T5235] Bluetooth: hci7: command tx timeout [ 515.259377][T10148] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 515.294232][T10148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 515.351647][T10148] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 515.383873][T10148] 60119 total pagecache pages [ 515.393686][T10148] 0 pages in swap cache [ 515.411854][T10148] Free swap = 124516kB [ 515.424374][T10148] Total swap = 124996kB [ 515.428622][T10148] 2097051 pages RAM [ 515.452856][T10148] 0 pages HighMem/MovableOnly [ 515.473138][T10148] 427076 pages reserved [ 515.483279][T10148] 0 pages cma reserved [ 515.513266][ T5284] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 515.529836][ T5284] usb 5-1: USB disconnect, device number 82 [ 516.042483][ T5235] Bluetooth: hci9: command tx timeout [ 516.494317][ T5284] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 516.684383][ T5284] usb 5-1: Using ep0 maxpacket: 8 [ 516.723545][ T5284] usb 5-1: config index 0 descriptor too short (expected 22352, got 36) [ 516.753047][ T5284] usb 5-1: config 66 has too many interfaces: 82, using maximum allowed: 32 [ 516.762458][ T5235] Bluetooth: hci8: command tx timeout [ 516.799912][ T5284] usb 5-1: config 66 has an invalid descriptor of length 117, skipping remainder of the config [ 516.851268][ T5284] usb 5-1: config 66 has 0 interfaces, different from the descriptor's value: 82 [ 516.892012][ T5284] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 516.924711][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.314378][ T5235] Bluetooth: hci7: command tx timeout [ 518.114467][ T5235] Bluetooth: hci9: command tx timeout [ 518.834382][ T5235] Bluetooth: hci8: command tx timeout [ 520.196607][ T5235] Bluetooth: hci9: command tx timeout [ 522.066264][ T5284] usb 5-1: string descriptor 0 read error: -32 [ 522.275031][ T5232] Bluetooth: hci9: command tx timeout [ 524.198356][ T5232] Bluetooth: hci0: command 0x0406 tx timeout [ 527.004708][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 527.017146][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 527.026524][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 527.037806][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 527.047228][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 527.057023][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 529.155042][ T5235] Bluetooth: hci0: command tx timeout [ 531.235674][ T5235] Bluetooth: hci0: command tx timeout [ 532.366437][ T9818] cxacru 2-1:0.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 533.314327][ T5235] Bluetooth: hci0: command tx timeout [ 535.372686][ T4688] udevd[4688]: worker [8583] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 535.394799][ T5235] Bluetooth: hci0: command tx timeout [ 544.679047][ T5235] Bluetooth: hci4: command 0x0406 tx timeout [ 549.794475][ T5235] Bluetooth: hci2: command 0x0406 tx timeout [ 563.065912][ T5235] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 563.081366][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.087831][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.101136][ T5235] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 563.109593][ T5235] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 563.144442][ T5235] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 563.157578][ T5235] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 563.166449][ T5235] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 565.233574][T10190] chnl_net:caif_netlink_parms(): no params data found [ 566.754622][ T5232] Bluetooth: hci10: command tx timeout [ 568.834503][ T5232] Bluetooth: hci10: command tx timeout [ 569.655743][ T5241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 569.669238][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 569.678997][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 569.687503][ T5241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 569.696088][ T5241] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 569.706204][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 570.276026][ T5232] Bluetooth: hci1: command 0x0406 tx timeout [ 570.681652][ T5241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 570.692127][ T5241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 570.701419][ T5241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 570.712064][ T5241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 570.721267][ T5241] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 570.735085][ T5241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 570.914793][ T5232] Bluetooth: hci10: command tx timeout [ 571.875794][ T5235] Bluetooth: hci3: command tx timeout [ 572.994587][ T5235] Bluetooth: hci10: command tx timeout [ 573.074822][ T5235] Bluetooth: hci5: command tx timeout [ 573.261223][ T5283] usb 5-1: USB disconnect, device number 83 [ 573.739807][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.798642][ T937] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 573.939833][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.960274][ T5235] Bluetooth: hci3: command tx timeout [ 574.059482][ T937] usb 1-1: can't set config #1, error -71 [ 574.213325][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 574.225113][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 574.236761][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 574.245036][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 574.252614][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 574.260503][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 574.419192][ T937] usb 1-1: USB disconnect, device number 70 [ 577.158716][ T5235] Bluetooth: hci3: command tx timeout [ 577.164245][ T5232] Bluetooth: hci4: command tx timeout [ 577.174353][ T5241] Bluetooth: hci5: command tx timeout [ 579.234379][ T5235] Bluetooth: hci3: command tx timeout [ 579.239853][ T5235] Bluetooth: hci4: command tx timeout [ 579.245473][ T5241] Bluetooth: hci5: command tx timeout [ 581.314314][ T5235] Bluetooth: hci4: command tx timeout [ 581.319788][ T5235] Bluetooth: hci5: command tx timeout [ 583.397280][ T5235] Bluetooth: hci4: command tx timeout [ 587.167960][ T5241] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 587.178802][ T5241] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 587.189322][ T5241] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 587.200884][ T5241] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 587.211218][ T5241] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 587.221652][ T5241] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 587.394698][ T30] INFO: task syz.2.677:9236 blocked for more than 143 seconds. [ 587.402411][ T30] Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 587.432568][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 587.471973][ T30] task:syz.2.677 state:D stack:25744 pid:9236 tgid:9231 ppid:9048 flags:0x00024000 [ 587.514307][ T30] Call Trace: [ 587.517649][ T30] [ 587.520611][ T30] __schedule+0x1895/0x4b30 [ 587.636716][ T30] ? __pfx___schedule+0x10/0x10 [ 587.641653][ T30] ? __pfx_lock_release+0x10/0x10 [ 587.684778][ T30] ? schedule+0x90/0x320 [ 587.689102][ T30] schedule+0x14b/0x320 [ 587.693292][ T30] schedule_timeout+0xb0/0x310 [ 587.719039][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 587.738396][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 587.762171][ T30] ? wait_for_completion+0x2fe/0x620 [ 587.783380][ T30] ? wait_for_completion+0x2fe/0x620 [ 587.803951][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 587.814653][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 587.820551][ T30] ? wait_for_completion+0x2fe/0x620 [ 587.846321][ T30] wait_for_completion+0x355/0x620 [ 587.851509][ T30] ? rcu_is_watching+0x15/0xb0 [ 587.882133][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 587.904358][ T30] ? io_wq_worker_wake+0x90/0xc0 [ 587.909382][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 587.935322][ T30] ? io_wq_put_and_exit+0xd0/0x720 [ 587.940518][ T30] io_wq_put_and_exit+0x344/0x720 [ 587.969232][ T30] ? io_wq_put_and_exit+0x1b1/0x720 [ 587.989545][ T30] ? __pfx_xa_find_after+0x10/0x10 [ 588.008711][ T30] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 588.035262][ T30] ? kfree+0x1a0/0x440 [ 588.039420][ T30] ? io_uring_clean_tctx+0x10a/0x1e0 [ 588.056575][ T30] io_uring_clean_tctx+0x168/0x1e0 [ 588.061771][ T30] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 588.095373][ T30] ? percpu_counter_add_batch+0x1a2/0x1f0 [ 588.111945][ T30] io_uring_cancel_generic+0x76a/0x820 [ 588.125239][ T30] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 588.131320][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 588.165505][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 588.171676][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 588.199461][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 588.223546][ T30] do_exit+0x6a8/0x28e0 [ 588.235667][ T30] ? __pfx_do_exit+0x10/0x10 [ 588.255804][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 588.261265][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 588.288730][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 588.314300][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 588.319493][ T30] do_group_exit+0x207/0x2c0 [ 588.339764][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 588.358632][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 588.363923][ T30] get_signal+0x16a3/0x1740 [ 588.386578][ T30] ? __pfx_get_signal+0x10/0x10 [ 588.391514][ T30] arch_do_signal_or_restart+0x96/0x860 [ 588.420952][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 588.446191][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 588.452268][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 588.484728][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 588.490367][ T30] do_syscall_64+0x100/0x230 [ 588.515047][ T30] ? clear_bhb_loop+0x35/0x90 [ 588.519807][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.555350][ T30] RIP: 0033:0x7fd4f637dff9 [ 588.559834][ T30] RSP: 002b:00007fd4f71280e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 588.598437][ T30] RAX: fffffffffffffe00 RBX: 00007fd4f6536060 RCX: 00007fd4f637dff9 [ 588.624395][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd4f6536060 [ 588.632440][ T30] RBP: 00007fd4f6536058 R08: 0000000000000000 R09: 0000000000000000 [ 588.670455][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4f6536064 [ 588.713707][ T30] R13: 0000000000000000 R14: 00007fd4f665f940 R15: 00007fd4f665fa28 [ 588.741184][ T30] [ 588.758509][ T30] [ 588.758509][ T30] Showing all locks held in the system: [ 588.784613][ T30] 3 locks held by kworker/0:0/8: [ 588.789614][ T30] 3 locks held by kworker/u8:0/11: [ 588.818693][ T30] #0: ffff88802de26948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 588.856441][ T30] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 588.902022][ T30] #2: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 588.942254][ T30] 3 locks held by kworker/u8:1/12: [ 588.962479][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 588.998529][ T30] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 589.034449][ T30] #2: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 589.043533][ T30] 1 lock held by khungtaskd/30: [ 589.077316][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 589.114467][ T30] 6 locks held by kworker/u8:2/35: [ 589.119636][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 589.159828][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 589.197846][ T30] #2: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 589.227105][ T30] #3: ffff8880337a30e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 589.258902][ T30] #4: ffff8880337a6250 (&devlink->lock_key#28){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 589.291269][ T30] #5: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 589.325133][ T30] 3 locks held by kworker/0:2/937: [ 589.330327][ T30] 2 locks held by getty/4992: [ 589.350905][ T30] #0: ffff88803306a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 589.382933][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 589.413646][ T30] 4 locks held by kworker/u9:7/5241: [ 589.434717][ T30] #0: ffff88808a296948 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 589.479294][ T30] #1: ffffc90003c37d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 589.522769][ T30] #2: ffff8880a233c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 589.553409][ T30] #3: ffffffff8fe3ea28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 589.586347][ T30] 6 locks held by kworker/0:4/5286: [ 589.591605][ T30] 2 locks held by kworker/0:7/5303: [ 589.616815][ T30] 1 lock held by iou-wrk-9236/9237: [ 589.637314][ T30] #0: ffff8880125e80a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd0b/0x1010 [ 589.668090][ T30] 1 lock held by iou-wrk-9236/9239: [ 589.680645][ T30] #0: ffff8880125e80a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd0b/0x1010 [ 589.712147][ T30] 1 lock held by iou-wrk-9236/9240: [ 589.745067][ T30] #0: ffff8880125e80a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd0b/0x1010 [ 589.765184][ T30] 1 lock held by iou-wrk-9236/9241: [ 589.770449][ T30] #0: ffff8880125e80a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd0b/0x1010 [ 589.816162][ T30] 1 lock held by iou-wrk-9236/9242: [ 589.821418][ T30] #0: ffff8880125e80a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd0b/0x1010 [ 589.868586][ T30] 1 lock held by iou-wrk-9236/9243: [ 589.873849][ T30] #0: ffff8880125e80a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd0b/0x1010 [ 589.919809][ T30] 1 lock held by iou-wrk-9236/9244: [ 589.940777][ T30] 1 lock held by iou-wrk-9236/9245: [ 589.965628][ T30] 4 locks held by syz.1.845/10111: [ 589.971405][ T30] 1 lock held by syz.0.861/10161: [ 589.997575][ T30] 2 locks held by syz-executor/10168: [ 590.003008][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 590.048802][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: fib6_rules_net_exit_batch+0x20/0xc0 [ 590.079794][ T30] 2 locks held by syz-executor/10173: [ 590.101385][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 590.130265][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 590.161658][ T30] 2 locks held by syz-executor/10176: [ 590.174362][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 590.183860][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe3/0x3d0 [ 590.232183][ T30] 2 locks held by syz-executor/10185: [ 590.243150][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 590.273567][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 590.305799][ T30] 1 lock held by syz-executor/10190: [ 590.311305][ T30] #0: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 590.392877][ T30] 2 locks held by syz-executor/10196: [ 590.414963][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 590.442343][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 590.470725][ T30] 2 locks held by syz-executor/10209: [ 590.492718][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 590.524372][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 590.533973][ T30] 2 locks held by syz-executor/10212: [ 590.575970][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 590.612535][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 590.652744][ T30] 2 locks held by syz-executor/10217: [ 590.662100][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 590.693893][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 590.713303][ T30] 2 locks held by syz-executor/10222: [ 590.743289][ T30] #0: ffffffff8fcc5610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 590.760601][ T30] #1: ffffffff8fcd2108 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 590.794290][ T30] [ 590.796669][ T30] ============================================= [ 590.796669][ T30] [ 590.830909][ T30] NMI backtrace for cpu 1 [ 590.835291][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 590.845818][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 590.855895][ T30] Call Trace: [ 590.859191][ T30] [ 590.862135][ T30] dump_stack_lvl+0x241/0x360 [ 590.866843][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.872063][ T30] ? __pfx__printk+0x10/0x10 [ 590.876692][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 590.881659][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 590.887142][ T30] ? _printk+0xd5/0x120 [ 590.891320][ T30] ? __pfx__printk+0x10/0x10 [ 590.895935][ T30] ? __wake_up_klogd+0xcc/0x110 [ 590.900803][ T30] ? __pfx__printk+0x10/0x10 [ 590.905411][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 590.910496][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 590.916506][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 590.922515][ T30] watchdog+0xff4/0x1040 [ 590.926782][ T30] ? watchdog+0x1ea/0x1040 [ 590.931225][ T30] ? __pfx_watchdog+0x10/0x10 [ 590.935928][ T30] kthread+0x2f0/0x390 [ 590.940014][ T30] ? __pfx_watchdog+0x10/0x10 [ 590.944718][ T30] ? __pfx_kthread+0x10/0x10 [ 590.949330][ T30] ret_from_fork+0x4b/0x80 [ 590.953769][ T30] ? __pfx_kthread+0x10/0x10 [ 590.958379][ T30] ret_from_fork_asm+0x1a/0x30 [ 590.963176][ T30] [ 590.967265][ T30] Sending NMI from CPU 1 to CPUs 0: [ 590.972522][ C0] NMI backtrace for cpu 0 [ 590.972536][ C0] CPU: 0 UID: 0 PID: 5286 Comm: kworker/0:4 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 590.972555][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 590.972567][ C0] Workqueue: events nsim_dev_trap_report_work [ 590.972590][ C0] RIP: 0010:lock_is_held_type+0x14f/0x190 [ 590.972615][ C0] Code: 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 75 42 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e <41> 5f 5d c3 cc cc cc cc 90 0f 0b 90 48 c7 c7 c0 ca 0a 8c e8 79 1a [ 590.972628][ C0] RSP: 0018:ffffc900000077a0 EFLAGS: 00000282 [ 590.972642][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000080000102 [ 590.972654][ C0] RDX: ffff88802cdc3c00 RSI: ffffffff8c0adc40 RDI: ffffffff8c60fb20 [ 590.972667][ C0] RBP: 0000000000000004 R08: ffffffff8a20765d R09: 1ffffffff2039e5d [ 590.972679][ C0] R10: dffffc0000000000 R11: ffffffff8a205ad0 R12: dffffc0000000000 [ 590.972697][ C0] R13: ffff88804a87b800 R14: ffff88803744acd8 R15: ffffffff8e937de0 [ 590.972710][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 590.972725][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 590.972737][ C0] CR2: 0000000000000000 CR3: 00000000668d6000 CR4: 00000000003526f0 [ 590.972751][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 590.972762][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 590.972773][ C0] Call Trace: [ 590.972779][ C0] [ 590.972787][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 590.972806][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 590.972828][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 590.972845][ C0] ? nmi_handle+0x2a/0x5a0 [ 590.972869][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 590.972890][ C0] ? nmi_handle+0x14f/0x5a0 [ 590.972906][ C0] ? nmi_handle+0x2a/0x5a0 [ 590.972922][ C0] ? lock_is_held_type+0x14f/0x190 [ 590.972942][ C0] ? default_do_nmi+0x63/0x160 [ 590.972961][ C0] ? exc_nmi+0x123/0x1f0 [ 590.972978][ C0] ? end_repeat_nmi+0xf/0x53 [ 590.972996][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 590.973014][ C0] ? ip_rcv_finish_core+0x50d/0x1b40 [ 590.973032][ C0] ? lock_is_held_type+0x14f/0x190 [ 590.973053][ C0] ? lock_is_held_type+0x14f/0x190 [ 590.973074][ C0] ? lock_is_held_type+0x14f/0x190 [ 590.973094][ C0] [ 590.973100][ C0] [ 590.973106][ C0] ip_rcv_finish_core+0x51a/0x1b40 [ 590.973129][ C0] ip_rcv_finish+0x14a/0x560 [ 590.973145][ C0] ? NF_HOOK+0x392/0x450 [ 590.973162][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 590.973178][ C0] NF_HOOK+0x3a4/0x450 [ 590.973194][ C0] ? __lock_acquire+0x1384/0x2050 [ 590.973214][ C0] ? NF_HOOK+0x9a/0x450 [ 590.973230][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 590.973245][ C0] ? ip_rcv_core+0x801/0xd10 [ 590.973262][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 590.973283][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 590.973299][ C0] __netif_receive_skb+0x2bf/0x650 [ 590.973319][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 590.973338][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 590.973356][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 590.973376][ C0] ? __pfx_lock_release+0x10/0x10 [ 590.973396][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 590.973422][ C0] process_backlog+0x662/0x15b0 [ 590.973442][ C0] ? process_backlog+0x33b/0x15b0 [ 590.973465][ C0] ? __pfx_process_backlog+0x10/0x10 [ 590.973482][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 590.973503][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 590.973525][ C0] __napi_poll+0xcb/0x490 [ 590.973544][ C0] net_rx_action+0x89b/0x1240 [ 590.973571][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 590.973599][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 590.973624][ C0] handle_softirqs+0x2c5/0x980 [ 590.973647][ C0] ? do_softirq+0x11b/0x1e0 [ 590.973666][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 590.973689][ C0] do_softirq+0x11b/0x1e0 [ 590.973713][ C0] [ 590.973718][ C0] [ 590.973725][ C0] ? __pfx_do_softirq+0x10/0x10 [ 590.973743][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 590.973765][ C0] ? rcu_is_watching+0x15/0xb0 [ 590.973783][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 590.973802][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 590.973819][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 590.973838][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 590.973857][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 590.973877][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 590.973901][ C0] ? process_scheduled_works+0x976/0x1850 [ 590.973921][ C0] process_scheduled_works+0xa63/0x1850 [ 590.973952][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 590.973975][ C0] ? assign_work+0x364/0x3d0 [ 590.973995][ C0] worker_thread+0x870/0xd30 [ 590.974018][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 590.974039][ C0] ? __kthread_parkme+0x169/0x1d0 [ 590.974060][ C0] ? __pfx_worker_thread+0x10/0x10 [ 590.974079][ C0] kthread+0x2f0/0x390 [ 590.974094][ C0] ? __pfx_worker_thread+0x10/0x10 [ 590.974113][ C0] ? __pfx_kthread+0x10/0x10 [ 590.974131][ C0] ret_from_fork+0x4b/0x80 [ 590.974149][ C0] ? __pfx_kthread+0x10/0x10 [ 590.974164][ C0] ret_from_fork_asm+0x1a/0x30 [ 590.974188][ C0] [ 591.654229][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 591.661131][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 591.671664][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 591.681748][ T30] Call Trace: [ 591.685045][ T30] [ 591.687993][ T30] dump_stack_lvl+0x241/0x360 [ 591.692707][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.697933][ T30] ? __pfx__printk+0x10/0x10 [ 591.702602][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 591.708615][ T30] ? vscnprintf+0x5d/0x90 [ 591.712966][ T30] panic+0x349/0x880 [ 591.716893][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 591.723077][ T30] ? __pfx_panic+0x10/0x10 [ 591.727520][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 591.732914][ T30] ? __irq_work_queue_local+0x137/0x410 [ 591.738482][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 591.743870][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 591.750049][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 591.756227][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 591.762406][ T30] watchdog+0x1033/0x1040 [ 591.766762][ T30] ? watchdog+0x1ea/0x1040 [ 591.771208][ T30] ? __pfx_watchdog+0x10/0x10 [ 591.775905][ T30] kthread+0x2f0/0x390 [ 591.779992][ T30] ? __pfx_watchdog+0x10/0x10 [ 591.784692][ T30] ? __pfx_kthread+0x10/0x10 [ 591.789301][ T30] ret_from_fork+0x4b/0x80 [ 591.793739][ T30] ? __pfx_kthread+0x10/0x10 [ 591.798433][ T30] ret_from_fork_asm+0x1a/0x30 [ 591.803230][ T30] [ 591.806529][ T30] Kernel Offset: disabled [ 591.810850][ T30] Rebooting in 86400 seconds..